PT-2026-22751 · Sourcecodester · Online Men'S Salon Management System+1

Shininadd · Published 2026-03-03 · Updated 2026-03-03 · CVE-2026-26883

Positive Technologies (AI Summary)

CVSS v3.1

2.7

Low

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Sourcecodester Online Men's Salon Management System version 1.0 Sourcecodester Simple Online Men's Salon Management System version 1.0

Description The software is susceptible to SQL Injection. This issue affects the /msms/classes/Master.php?f=delete appointment endpoint. The f parameter is vulnerable. Successful exploitation could allow an attacker to manipulate database queries, potentially leading to unauthorized access, data modification, or data deletion.

Recommendations Apply input validation and sanitization to the f parameter in the /msms/classes/Master.php file.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2026-26883

Affected Products

Online Men'S Salon Management System

Simple Online Mens Salon Management System

References · 6

• 🔥 https://github.com/shininadd/bug_report/blob/main/Sourcecodester/simple-online-mens-salon-management-system/SQL-1.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-26883 · Security Note
• https://osv.dev/vulnerability/CVE-2026-26883 · Vendor Advisory
• https://twitter.com/CVEnew/status/2028877550987178443 · Twitter Post
• https://t.me/CVEtracker/46218 · Telegram Post
• https://twitter.com/infoflowcloud/status/2028878394771837001 · Twitter Post