https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-12325.htmlhttps://patchthecve.com/cve/CVE-2025-12325.htmlThu, 08 Oct 2026 11:10:00 +0000HIGH 7.3: A vulnerability has been found in SourceCodester Best Salon Management System 1.0. This affects an unknown part of the file /panel/forgot-password.php. The manipulation of the argument email leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public anhttps://patchthecve.com/cve/CVE-2025-11662.htmlhttps://patchthecve.com/cve/CVE-2025-11662.htmlThu, 08 Oct 2026 12:10:00 +0000HIGH 7.3: A security flaw has been discovered in SourceCodester Best Salon Management System 1.0. Impacted is an unknown function of the file /booking.php. The manipulation of the argument serv_id results in sql injection. It is possible to launch the attack remotely. The exploit has been released to the publhttps://patchthecve.com/cve/CVE-2025-11615.htmlhttps://patchthecve.com/cve/CVE-2025-11615.htmlThu, 08 Oct 2026 13:10:00 +0000HIGH 7.3: A security flaw has been discovered in SourceCodester Best Salon Management System 1.0. This affects an unknown part of the file /panel/add_invoice.php. Performing manipulation of the argument ServiceId results in sql injection. Remote exploitation of the attack is possible. The exploit has been relhttps://patchthecve.com/cve/CVE-2025-11614.htmlhttps://patchthecve.com/cve/CVE-2025-11614.htmlThu, 08 Oct 2026 13:10:00 +0000HIGH 7.3: A vulnerability was identified in SourceCodester Best Salon Management System 1.0. Affected by this issue is some unknown functionality of the file /panel/edit-appointment.php. Such manipulation of the argument editid leads to sql injection. The attack may be launched remotely. The exploit is publichttps://patchthecve.com/cve/CVE-2025-7144.htmlhttps://patchthecve.com/cve/CVE-2025-7144.htmlWed, 17 Jun 2026 10:04:22 +0000LOW 2.4: A vulnerability has been found in SourceCodester Best Salon Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /panel/admin-profile.php of the component Admin Profile Page. The manipulation of the argument Admin Name leads to cross site scriptinghttps://patchthecve.com/cve/CVE-2025-7143.htmlhttps://patchthecve.com/cve/CVE-2025-7143.htmlWed, 17 Jun 2026 10:04:21 +0000LOW 2.4: A vulnerability, which was classified as problematic, was found in SourceCodester Best Salon Management System 1.0. This affects an unknown part of the file /panel/edit-tax.php of the component Update Tax Page. The manipulation of the argument Tax Name leads to cross site scripting. It is possible thttps://patchthecve.com/cve/CVE-2025-7142.htmlhttps://patchthecve.com/cve/CVE-2025-7142.htmlWed, 17 Jun 2026 10:04:21 +0000LOW 2.4: A vulnerability, which was classified as problematic, has been found in SourceCodester Best Salon Management System 1.0. Affected by this issue is some unknown functionality of the file /panel/search-appointment.php. The manipulation leads to cross site scripting. The attack may be launched remotelyhttps://patchthecve.com/cve/CVE-2025-7141.htmlhttps://patchthecve.com/cve/CVE-2025-7141.htmlWed, 17 Jun 2026 10:04:21 +0000LOW 2.4: A vulnerability classified as problematic was found in SourceCodester Best Salon Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /panel/edit_plan.php of the component Update Staff Page. The manipulation leads to cross site scripting. The attack can be lahttps://patchthecve.com/cve/CVE-2025-7140.htmlhttps://patchthecve.com/cve/CVE-2025-7140.htmlWed, 17 Jun 2026 10:04:21 +0000LOW 2.4: A vulnerability classified as problematic has been found in SourceCodester Best Salon Management System 1.0. Affected is an unknown function of the file /panel/edit-staff.php of the component Update Staff Page. The manipulation of the argument Staff Name leads to cross site scripting. It is possiblehttps://patchthecve.com/cve/CVE-2025-7139.htmlhttps://patchthecve.com/cve/CVE-2025-7139.htmlWed, 17 Jun 2026 10:04:21 +0000LOW 2.4: A vulnerability was found in SourceCodester Best Salon Management System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /panel/edit-customer-detailed.php of the component Update Customer Details Page. The manipulation of the argument Name leads to crosshttps://patchthecve.com/cve/CVE-2025-7138.htmlhttps://patchthecve.com/cve/CVE-2025-7138.htmlWed, 17 Jun 2026 10:04:21 +0000MEDIUM 6.3: A vulnerability was found in SourceCodester Best Salon Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /panel/admin-profile.php. The manipulation of the argument adminname leads to sql injection. The attack can be initiated remotely. The ehttps://patchthecve.com/cve/CVE-2025-7137.htmlhttps://patchthecve.com/cve/CVE-2025-7137.htmlWed, 17 Jun 2026 10:04:21 +0000MEDIUM 6.3: A vulnerability was found in SourceCodester Best Salon Management System 1.0. It has been classified as critical. This affects an unknown part of the file /panel/schedule-staff.php. The manipulation of the argument staff_id leads to sql injection. It is possible to initiate the attack remotely. The https://patchthecve.com/cve/CVE-2025-6880.htmlhttps://patchthecve.com/cve/CVE-2025-6880.htmlWed, 17 Jun 2026 10:02:45 +0000MEDIUM 6.3: A vulnerability classified as critical has been found in SourceCodester Best Salon Management System 1.0. Affected is an unknown function of the file /panel/edit-tax.php. The manipulation of the argument editid leads to sql injection. It is possible to launch the attack remotely. The exploit has beehttps://patchthecve.com/cve/CVE-2025-6879.htmlhttps://patchthecve.com/cve/CVE-2025-6879.htmlWed, 17 Jun 2026 10:02:45 +0000MEDIUM 6.3: A vulnerability was found in SourceCodester Best Salon Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /panel/add-tax.php. The manipulation of the argument Name leads to sql injection. The attack may be initiated remotely. The exploit has https://patchthecve.com/cve/CVE-2025-6878.htmlhttps://patchthecve.com/cve/CVE-2025-6878.htmlWed, 17 Jun 2026 10:02:45 +0000MEDIUM 6.3: A vulnerability was found in SourceCodester Best Salon Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /panel/search-appointment.php. The manipulation of the argument searchdata leads to sql injection. The attack can be initiated remotely.https://patchthecve.com/cve/CVE-2025-6877.htmlhttps://patchthecve.com/cve/CVE-2025-6877.htmlWed, 17 Jun 2026 10:02:45 +0000MEDIUM 6.3: A vulnerability was found in SourceCodester Best Salon Management System 1.0. It has been classified as critical. This affects an unknown part of the file /panel/edit-category.php. The manipulation of the argument editid leads to sql injection. It is possible to initiate the attack remotely. The exphttps://patchthecve.com/cve/CVE-2025-6876.htmlhttps://patchthecve.com/cve/CVE-2025-6876.htmlWed, 17 Jun 2026 10:02:45 +0000MEDIUM 6.3: A vulnerability was found in SourceCodester Best Salon Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /panel/add-category.php. The manipulation of the argument Name leads to sql injection. The attack may be launched remotely. The exhttps://patchthecve.com/cve/CVE-2025-6875.htmlhttps://patchthecve.com/cve/CVE-2025-6875.htmlWed, 17 Jun 2026 10:02:44 +0000MEDIUM 6.3: A vulnerability has been found in SourceCodester Best Salon Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /panel/edit-subscription.php. The manipulation of the argument editid leads to sql injection. The attack can be launchehttps://patchthecve.com/cve/CVE-2025-6874.htmlhttps://patchthecve.com/cve/CVE-2025-6874.htmlWed, 17 Jun 2026 10:02:44 +0000MEDIUM 6.3: A vulnerability, which was classified as critical, was found in SourceCodester Best Salon Management System 1.0. Affected is an unknown function of the file /panel/add_subscribe.php. The manipulation of the argument user_id/plan_id leads to sql injection. It is possible to launch the attack remotelyhttps://patchthecve.com/cve/CVE-2025-6862.htmlhttps://patchthecve.com/cve/CVE-2025-6862.htmlWed, 17 Jun 2026 10:02:43 +0000MEDIUM 6.3: A vulnerability classified as critical has been found in SourceCodester Best Salon Management System 1.0. Affected is an unknown function of the file /panel/edit_plan.php. The manipulation of the argument editid leads to sql injection. It is possible to launch the attack remotely. The exploit has behttps://patchthecve.com/cve/CVE-2025-6861.htmlhttps://patchthecve.com/cve/CVE-2025-6861.htmlWed, 17 Jun 2026 10:02:42 +0000MEDIUM 6.3: A vulnerability was found in SourceCodester Best Salon Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /panel/add_plan.php. The manipulation of the argument plan_name/description/duration_days/price leads to sql injection. The attack may bhttps://patchthecve.com/cve/CVE-2025-6860.htmlhttps://patchthecve.com/cve/CVE-2025-6860.htmlWed, 17 Jun 2026 10:02:42 +0000MEDIUM 6.3: A vulnerability was found in SourceCodester Best Salon Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /panel/staff_commision.php. The manipulation of the argument fromdate/todate leads to sql injection. The attack can be initiated remotelhttps://patchthecve.com/cve/CVE-2025-6859.htmlhttps://patchthecve.com/cve/CVE-2025-6859.htmlWed, 17 Jun 2026 10:02:42 +0000MEDIUM 6.3: A vulnerability was found in SourceCodester Best Salon Management System 1.0. It has been classified as critical. This affects an unknown part of the file /panel/pro_sale.php. The manipulation of the argument fromdate/todate leads to sql injection. It is possible to initiate the attack remotely. Thehttps://patchthecve.com/cve/CVE-2025-6609.htmlhttps://patchthecve.com/cve/CVE-2025-6609.htmlWed, 17 Jun 2026 10:02:14 +0000MEDIUM 6.3: A vulnerability was found in SourceCodester Best Salon Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /panel/bwdates-reports-details.php. The manipulation of the argument fromdate/todate leads to sql injection. The attack may be lauhttps://patchthecve.com/cve/CVE-2025-6608.htmlhttps://patchthecve.com/cve/CVE-2025-6608.htmlWed, 17 Jun 2026 10:02:14 +0000MEDIUM 6.3: A vulnerability has been found in SourceCodester Best Salon Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /panel/edit-services.php. The manipulation of the argument editid leads to sql injection. The attack can be launched rehttps://patchthecve.com/cve/CVE-2025-6607.htmlhttps://patchthecve.com/cve/CVE-2025-6607.htmlWed, 17 Jun 2026 10:02:14 +0000MEDIUM 6.3: A vulnerability, which was classified as critical, was found in SourceCodester Best Salon Management System 1.0. Affected is an unknown function of the file /panel/stock.php. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has beehttps://patchthecve.com/cve/CVE-2025-6606.htmlhttps://patchthecve.com/cve/CVE-2025-6606.htmlWed, 17 Jun 2026 10:02:14 +0000MEDIUM 6.3: A vulnerability, which was classified as critical, has been found in SourceCodester Best Salon Management System 1.0. This issue affects some unknown processing of the file /panel/add-services.php. The manipulation of the argument Type leads to sql injection. The attack may be initiated remotely. Thhttps://patchthecve.com/cve/CVE-2025-6605.htmlhttps://patchthecve.com/cve/CVE-2025-6605.htmlWed, 17 Jun 2026 10:02:14 +0000MEDIUM 6.3: A vulnerability classified as critical was found in SourceCodester Best Salon Management System 1.0. This vulnerability affects unknown code of the file /panel/edit-staff.php. The manipulation of the argument editid leads to sql injection. The attack can be initiated remotely. The exploit has been dhttps://patchthecve.com/cve/CVE-2025-6604.htmlhttps://patchthecve.com/cve/CVE-2025-6604.htmlWed, 17 Jun 2026 10:02:13 +0000MEDIUM 6.3: A vulnerability classified as critical has been found in SourceCodester Best Salon Management System 1.0. This affects an unknown part of the file /panel/add-staff.php. The manipulation of the argument Name leads to sql injection. It is possible to initiate the attack remotely. The exploit has been https://patchthecve.com/cve/CVE-2025-6583.htmlhttps://patchthecve.com/cve/CVE-2025-6583.htmlWed, 17 Jun 2026 10:02:11 +0000MEDIUM 6.3: A vulnerability, which was classified as critical, was found in SourceCodester Best Salon Management System 1.0. This affects an unknown part of the file /view-appointment.php. The manipulation of the argument viewid leads to sql injection. It is possible to initiate the attack remotely. The exploithttps://patchthecve.com/cve/CVE-2025-6582.htmlhttps://patchthecve.com/cve/CVE-2025-6582.htmlWed, 17 Jun 2026 10:02:11 +0000MEDIUM 6.3: A vulnerability, which was classified as critical, has been found in SourceCodester Best Salon Management System 1.0. Affected by this issue is some unknown functionality of the file /edit-customer-detailed.php. The manipulation of the argument editid leads to sql injection. The attack may be launchhttps://patchthecve.com/cve/CVE-2025-6581.htmlhttps://patchthecve.com/cve/CVE-2025-6581.htmlWed, 17 Jun 2026 10:02:11 +0000MEDIUM 6.3: A vulnerability classified as critical was found in SourceCodester Best Salon Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /add-customer.php. The manipulation of the argument name/email/mobilenum/gender/details/dob/marriage_date leads to sql injectionhttps://patchthecve.com/cve/CVE-2025-6580.htmlhttps://patchthecve.com/cve/CVE-2025-6580.htmlWed, 17 Jun 2026 10:02:11 +0000HIGH 7.3: A vulnerability classified as critical has been found in SourceCodester Best Salon Management System 1.0. Affected is an unknown function of the component Login. The manipulation of the argument Username leads to sql injection. It is possible to launch the attack remotely. The exploit has been discl