CVE-2023-3873: Campcodes Beauty Salon Management System index.php sql injection

Published Jul 25, 2023

Updated

A vulnerability, which was classified as critical, has been found in Campcodes Beauty Salon Management System 1.0. This issue affects some unknown processing of the file /admin/index.php. The manipulation of the argument username leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-235235.

Affected Software

1 affected component

Campcodes Beauty Salon Management System=1.0

Event History

Jul 25, 2023

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2023-3873?

The severity of CVE-2023-3873 is high with a severity value of 7.5.

How does CVE-2023-3873 affect Campcodes Beauty Salon Management System?

CVE-2023-3873 affects Campcodes Beauty Salon Management System 1.0 by allowing remote SQL injection through the username argument in /admin/index.php.

What is the Common Weakness Enumeration (CWE) ID associated with CVE-2023-3873?

The Common Weakness Enumeration (CWE) ID associated with CVE-2023-3873 is CWE-89.

How can I fix CVE-2023-3873?

To fix CVE-2023-3873, it is recommended to apply the latest patch or update provided by Campcodes for Beauty Salon Management System 1.0.

Where can I find more information about CVE-2023-3873?

You can find more information about CVE-2023-3873 on the following references: [link1], [link2], [link3].