CVE-2024-53480 identifies a critical SQL Injection vulnerability (CWE-89) in Phpgurukul's Beauty Parlour Management System v1.1. The flaw exists in the login.php file where the emailcont parameter is not properly sanitized, allowing remote attackers to inject malicious SQL queries. The vulnerability has a CVSS 3.1 base score of 9.8, indicating it is exploitable over the network without authentication and can result in complete system compromise.

Successful exploitation of this vulnerability can lead to unauthorized data disclosure, modification, or deletion within the application's database. It can also allow attackers to bypass authentication mechanisms, execute arbitrary SQL commands, and potentially gain full control over the affected system's backend data and functionality.

No official patch or remediation is currently available for this vulnerability. Users of Phpgurukul's Beauty Parlour Management System v1.1 should apply appropriate input validation and parameterized queries to mitigate the risk. Monitor vendor advisories for any forthcoming official fixes. Until a patch is released, restricting access to the login.php endpoint and employing web application firewalls may help reduce exposure.