CVE-2026-37431 | THREATINT

Description

Beauty Parlour Management System v1.1 was discovered to contain a SQL injection vulnerability via the aptnumber parameter in the /appointment-detail.php endpoint. This vulnerability allows attackers to access sensitive database information via a crafted SQL statement.

PUBLISHED Reserved 2026-04-06 | Published 2026-05-08 | Updated 2026-05-08 | Assigner mitre

References

github.com/...y Parlour Management System/SQL Injection-2.md exploit

github.com/...y Parlour Management System/SQL Injection-2.md

cve.org (CVE-2026-37431)

nvd.nist.gov (CVE-2026-37431)

Download JSON