SQL Injection Vulnerability in SourceCodester Best Salon Management System
CVE-2025-6879
6.3MEDIUM
Key Information:
- Vendor
SourceCodester
- Vendor
- CVE Published:
- 30 June 2025
What is CVE-2025-6879?
A vulnerability exists in the SourceCodester Best Salon Management System version 1.0, specifically affecting the /panel/add-tax.php file. This vulnerability can be exploited by manipulating user input to the Name parameter, leading to SQL injection attacks. Attackers may execute these exploits remotely, potentially compromising data integrity and confidentiality. As this issue has been publicly disclosed, it is crucial for users to apply appropriate security measures to mitigate risks associated with this vulnerability.