We’re taking on a small number of new builds and rebuilds this quarter. Book a call to see if your project is a fit.

CVE CVE-2026-2088

CVE-2026-2088

PHP

Severity: HIGH
CVSS: 7.3CVSS
Published: 2026-02-07
Last modified: 2026-02-10
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
CWE: CWE-74CWE-89

Description

A vulnerability has been found in PHPGurukul Beauty Parlour Management System 1.1. This affects an unknown part of the file /admin/accepted-appointment.php. Such manipulation of the argument delid leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

References

https://github.com/Shaon-Xis/cve/issues/1
https://phpgurukul.com/
https://vuldb.com/?ctiid.344655
https://vuldb.com/?id.344655
https://vuldb.com/?submit.746520

Summary

Description

References