CVE-2023-3873: Campcodes Beauty Salon Management System index.php sql injection
First published: Tue Jul 25 2023(Updated: )
A vulnerability, which was classified as critical, has been found in Campcodes Beauty Salon Management System 1.0. This issue affects some unknown processing of the file /admin/index.php. The manipulation of the argument username leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-235235.
Credit: cna@vuldb.com cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Campcodes Beauty Salon Management System | =1.0 | |
| =1.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2023-3873?
The severity of CVE-2023-3873 is high with a severity value of 7.5.
How does CVE-2023-3873 affect Campcodes Beauty Salon Management System?
CVE-2023-3873 affects Campcodes Beauty Salon Management System 1.0 by allowing remote SQL injection through the username argument in /admin/index.php.
What is the Common Weakness Enumeration (CWE) ID associated with CVE-2023-3873?
The Common Weakness Enumeration (CWE) ID associated with CVE-2023-3873 is CWE-89.
How can I fix CVE-2023-3873?
To fix CVE-2023-3873, it is recommended to apply the latest patch or update provided by Campcodes for Beauty Salon Management System 1.0.
Where can I find more information about CVE-2023-3873?
You can find more information about CVE-2023-3873 on the following references: [link1], [link2], [link3].
- collector/nvd-latest
- collector/nvd-index
- agent/author
- agent/type
- agent/weakness
- agent/references
- agent/description
- agent/softwarecombine
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/title
- agent/severity
- agent/tags
- agent/first-publish-date
- agent/event
- vendor/campcodes
- canonical/campcodes beauty salon management system
- version/campcodes beauty salon management system/1.0