7.6
High
CVE-2024-39658 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Salon Booking…
Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Salon Booking System Salon booking system allows SQL Injection.This issue affects Salon booking system: from n/a through 10.7.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Salon booking system 10.7 | earliest → 10.7 | No fix stated |
Other CVEs of Salon booking system
The 8 CVEs of Salon booking system →
CVE-2024-47316
Authorization Bypass Through User-Controlled Key vulnerability in Dimitri Grassi Salon booking system…
4.3
Medium
CVE-2024-43280
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Salon Booking System Salon booking system.This…
4.7
Medium
CVE-2024-37231
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Salon Booking System…
8.6
High
CVE-2023-48319
Improper Privilege Management vulnerability in Salon Booking System Salon booking system allows Privilege…
6.8
Medium