ORETNOM23 Simple Online Men's Salon Management System vulnerabilities

8 CVEs affecting ORETNOM23 Simple Online Men's Salon Management System, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-26886, published 2026-03-03.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-44600, published 2021-12-23. High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days. The password parameter on Simple Online Mens Salon Management System (MSMS) 1.0 appears to be vulnerable to SQL injection attacks through the password parameter. The predictive tests of this…
CVE-2023-3987, published 2023-07-28. Critical severity, CVSS 9.8. EPSS: 0.8% chance of exploitation in the next 30 days. A vulnerability was found in SourceCodester Simple Online Mens Salon Management System 1.0. It has been classified as critical. Affected is an unknown function of the file…
CVE-2023-3986, published 2023-07-28. Medium severity, CVSS 4.8. EPSS: 0.7% chance of exploitation in the next 30 days. A vulnerability was found in SourceCodester Simple Online Mens Salon Management System 1.0 and classified as problematic. This issue affects some unknown processing of the file…
CVE-2024-5069, published 2024-05-17. Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days. A vulnerability, which was classified as critical, has been found in SourceCodester Simple Online Mens Salon Management System 1.0. Affected by this issue is some unknown functionality of the file…
CVE-2026-26886, published 2026-03-03. Low severity, CVSS 2.7. EPSS: 0.3% chance of exploitation in the next 30 days. Sourcecodester Online Men's Salon Management System v1.0 is vulnerable to SQL Injection in /admin/services/manage_service.php.
CVE-2026-26885, published 2026-03-03. Low severity, CVSS 2.7. EPSS: 0.3% chance of exploitation in the next 30 days. Sourcecodester Online Men's Salon Management System v1.0 is vulnerable to SQL Injection in /classes/Master.php?f=delete_service.
CVE-2026-26884, published 2026-03-03. Low severity, CVSS 2.7. EPSS: 0.3% chance of exploitation in the next 30 days. Sourcecodester Online Men's Salon Management System v1.0 is vulnerable to SQL Injection in /msms/admin/appointments/view_appointment.php.
CVE-2026-26883, published 2026-03-03. Low severity, CVSS 2.7. EPSS: 0.3% chance of exploitation in the next 30 days. Sourcecodester Online Men's Salon Management System v1.0 is vulnerable to SQL Injection in /msms/classes/Master.php?f=delete_appointment.