CVE-2025-3312(phpgurukul / men_salon_management_system)

LOWCVSS 9.8 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A vulnerability, which was classified as critical, has been found in PHPGurukul Men Salon Management System 1.0. This issue affects some unknown processing of the file /admin/add-customer-services.php. The manipulation of the argument sids[] leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-74CWE-89

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • men_salon_management_system

Threat summary

  • 1 mentions across 1 observed day

What's happening

  • 1 total mentions across 1 day

Affected systems

Vendors
Products
men_salon_management_system

1 version affected across 1 product

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-10-25: 110-25
Full discourse1 post
  • ウグイス宿@ashinowoto

    まずios18のSafari限定の脆弱性を調べさせて、種類ごとにわけるやろ…? メモリ破壊・RCE系 【メモリ管理・領域逸脱系】 1-1、バッファオーバーフロー 1-1-1、CVE-2025-14174 [CVSS: 8.8 (High)] 1-1-2、CVE-2025-24154 [CVSS: 8.8 (High)] 1-1-3、CVE-2025-43300 [CVSS: 9.8 (Critical)] 1-2、Use-After-Free 1-2-1、CVE-2025-24158 [CVSS: 8.8 (High)] 1-2-2、CVE-2025-24189 [CVSS: 8.8 (High)] 1-2-3、CVE-2025-31278 [CVSS: 8.8 (High)] 1-2-4、CVE-2025-43529 [CVSS: 9.8 (Critical)] 【スクリプト実行エンジン・コンパイラ系】 2-1、JavaScriptCore JITコンパイラ最適化不備(JIT / DFG) 2-1-1、CVE-2024-44308 [CVSS: 8.8 (High)] 2-1-2、CVE-2024-54505 [CVSS: 8.8 (High)] 2-1-3、CVE-2024-54543 [CVSS: 8.8 (High)] 2-1-4、CVE-2025-24128 [CVSS: 8.8 (High)] 2-1-5、CVE-2025-3312 [CVSS: 8.8 (High)] 2-2、型混同・オブジェクト状態管理不備(Type Confusion / State) 2-2-1、CVE-2025-24201 [CVSS: 8.8 (High)] 2-2-2、CVE-2025-31273 [CVSS: 8.8 (High)] 2-2-3、CVE-2025-31277 [CVSS: 8.8 (High)] 2-2-4、CVE-2025-43212 [CVSS: 8.8 (High)] 2-2-5、CVE-2025-43213 [CVSS: 8.8 (High)] 【クロスサイト・データ漏洩型(Cross-Origin / Information Disclosure)】 1、スクリプト実行・状態管理系 1-1、ステート・クッキー処理不備によるスクリプト実行(XSS) 1-1-1、CVE-2024-44309 [CVSS: 8.8 (High)] 2、データ保護隔離系 2-1、オリジン隔離の追跡不備によるデータ奪取(Cross-Origin Exfiltration) 2-1-1、CVE-2024-54467 [CVSS: 8.8 (High)] 【セキュリティ制限バイパス型(Policy / Sandbox Bypass)】 1、コンテンツアクセス制御系 1-1、Content Security Policy(CSP)制限回避 1-1-1、CVE-2024-44296 [CVSS: 8.8 (High)] 2、ブラウザプロセス制御系 2-1、レンダラー・プロセス間制御バイパス 2-1-1、CVE-2024-54479 [CVSS: 8.5 (High)]

    000612.3K
    76.1K followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appphpgurukulmen_salon_management_system1.0--

Explore more