CVE-2023-3878: Campcodes Beauty Salon Management System about-us.php sql injection

Published Jul 25, 2023

Updated

A vulnerability was found in Campcodes Beauty Salon Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/about-us.php. The manipulation of the argument pagedes leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-235240.

Affected Software

1 affected component

Campcodes Beauty Salon Management System=1.0

Event History

Jul 25, 2023

CVE Published

via MITRE·03:00 AM

Data Sourced

via MITRE·03:00 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2023-3878?

The severity of CVE-2023-3878 is high with a score of 7.5.

What software is affected by CVE-2023-3878?

Campcodes Beauty Salon Management System version 1.0 is affected by CVE-2023-3878.

What is the vulnerability description of CVE-2023-3878?

CVE-2023-3878 is a critical SQL injection vulnerability found in Campcodes Beauty Salon Management System 1.0, specifically in the /admin/about-us.php file.

Can the attack be initiated remotely?

Yes, the attack can be initiated remotely for CVE-2023-3878.

How can I fix CVE-2023-3878?

To fix CVE-2023-3878, it is recommended to apply the latest security patches or updates provided by Campcodes for the Beauty Salon Management System.