CVE-2025-12325

MEDIUM

cna@vuldb.com

Details

CVSS v3: 7.3
CVSS v4: 5.5
CVSS v2: 7.5
NVD published: 2025-10-27 21:15:36
Affected versions: cpe:2.3:a:mayurik:best_salon_management_system:1.0:*:*:*:*:*:*:*
Summary: A vulnerability has been found in SourceCodester Best Salon Management System 1.0. This affects an unknown part of the file /panel/forgot-password.php. The manipulation of the argument email leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Remediation: Not available in our cache.
Exploit info: https://github.com/yishengsss/CVE-Best-house-rental-management-system-V1.0-admin_class.php-save_house-SQL-injection/blob/main/report.md

TopVuln sends digest emails with high-risk CVE picks across multiple authoritative sources—curated with EPSS and AI. Choose daily per-stream emails and optional weekly or monthly roundups.

Subscribe — free email digest or paid plan

Information is aggregated from multiple authoritative sources for convenience; verify with NVD and vendors before operational decisions.