phpgurukul Men Salon Management System v2.0 is vulnerable to SQL Injection via the "username" parameter of /msms/admin/index.php.
CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')