The vulnerability CVE-2024-51066 affects Phpgurukul's Beauty Parlour Management System v1.1 and involves an IDOR issue in appointment-detail.php. This allows attackers to bypass authorization controls and directly access sensitive customer PII data belonging to other users. The vulnerability is remotely exploitable without any privileges or user interaction required, leading to a confidentiality impact. There is no indication of integrity or availability impact. No known exploits are reported in the wild, and no official patch or fix has been disclosed as of the publication date.

Successful exploitation results in unauthorized disclosure of sensitive Personally Identifiable Information (PII) of customers, violating confidentiality. This could lead to privacy breaches and potential misuse of customer data. There is no reported impact on data integrity or system availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to appointment-detail.php and implement additional access control checks to prevent unauthorized data access. Monitor for updates from Phpgurukul regarding patches or official mitigations.