CVE-2025-3690

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A vulnerability was found in PHPGurukul Men Salon Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/edit-services.php. The manipulation of the argument cost leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-74CWE-89

Affected software

No affected versions have been published.

Timeline

Published
Apr 16, 2025
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-369006.7In lwis_test_register_io of lwis_device_test.c, there is a possible OOB Write due to an integer overflow. This could lead to local escalatioCVE-2025-369018.8WLAN in Android before 2025-09-05 on Google Pixel devices allows elevation of privilege, aka A-396462223.CVE-2025-369026.7In syna_cdev_ioctl_store_pid() of syna_tcm2_sysfs.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead CVE-2025-369037.8In lwis_io_buffer_write, there is a possible OOB read/write due to improper input validation. This could lead to local escalation of privileCVE-2025-369049.8WLAN in Android before 2025-09-05 on Google Pixel devices allows elevation of privilege, aka A-396458384.CVE-2025-369057.8In gxp_mapping_create of gxp_mapping.c, there is a possible privilege escalation due to a logic error in the code. This could lead to local CVE-2025-369067.8In ConvertReductionOp of darwinn_mlir_converter_aidl.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lCVE-2025-369077.3In draw_surface_image() of abl/android/lib/draw/draw.c, there is a possible out of bounds write due to a heap buffer overflow. This could leCVE-2025-369086.7In lwis_top_register_io of lwis_device_top.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to lCVE-2025-369095.3Information disclosureCVE-2025-36915.3A vulnerability was found in mirweiye Seven Bears Library CMS 2023. It has been classified as problematic. Affected is an unknown function oCVE-2025-369117.1In key-based pairing, there is a possible ID due to a logic error in the code. This could lead to remote (proximal/adjacent) information dis
CVE-2025-3690: Critical severity, CVSS 9.8 | Vulnix