CVE-2025-9932

CRITICAL 9.8CVE-2025-9932 · Published 04/09/2025 · updated 17/06/2026

Package	Affected versions	Patched versions
beauty parlour management system phpgurukul	`= 1.0`	No fix yet

Description

A flaw has been found in PHPGurukul Beauty Parlour Management System 1.1. Affected by this vulnerability is an unknown functionality of the file /admin/update-image.php. This manipulation of the argument lid causes sql injection. The attack may be initiated remotely. The exploit has been published and may be used.

References

xiaoxinkaishi/cve · Exploit
phpgurukul.com · Product
vuldb.com · Permissions Required
vuldb.com · Third Party Advisory
vuldb.com · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free