A security flaw has been discovered in Campcodes Online Beauty Parlor Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/sales-reports-detail.php. The manipulation of the argument fromdate/todate results in sql injection. The attack can be launched remotely. The exploit has been released to the public and may be exploited.
References
| Link | Resource |
|---|---|
| https://github.com/fubxx/CVE/blob/main/Online%20Beauty%20Parlor%20Management%20System%20SQL%20Injection%20on%20sales-reports-detail.php.md | Exploit Third Party Advisory |
| https://vuldb.com/?ctiid.325183 | Permissions Required VDB Entry |
| https://vuldb.com/?id.325183 | Third Party Advisory VDB Entry |
| https://vuldb.com/?submit.654384 | Third Party Advisory VDB Entry |
| https://www.campcodes.com/ | Product |
Configurations
History
25 Sep 2025, 18:08
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/fubxx/CVE/blob/main/Online%20Beauty%20Parlor%20Management%20System%20SQL%20Injection%20on%20sales-reports-detail.php.md - Exploit, Third Party Advisory | |
| References | () https://vuldb.com/?ctiid.325183 - Permissions Required, VDB Entry | |
| References | () https://vuldb.com/?id.325183 - Third Party Advisory, VDB Entry | |
| References | () https://vuldb.com/?submit.654384 - Third Party Advisory, VDB Entry | |
| References | () https://www.campcodes.com/ - Product | |
| First Time |
Campcodes
Campcodes online Beauty Parlor Management System |
|
| CPE | cpe:2.3:a:campcodes:online_beauty_parlor_management_system:1.0:*:*:*:*:*:*:* |
23 Sep 2025, 01:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-09-23 01:15
Updated : 2025-09-25 18:08
NVD link : CVE-2025-10826
Mitre link : CVE-2025-10826
CVE.ORG link : CVE-2025-10826
JSON object : View
Products Affected
campcodes
- online_beauty_parlor_management_system