A vulnerability marked as critical has been reported in PHPGurukul Beauty Parlour Management System 1.1. Affected by this vulnerability is an unknown functionality of the file /admin/update-image.php. This manipulation of the argument lid causes sql injection.
This vulnerability appears as CVE-2025-9932. The attack may be initiated remotely. In addition, an exploit is available.