First published: Tue Jul 25 2023(Updated: )
A vulnerability classified as critical was found in Campcodes Beauty Salon Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/forgot-password.php. The manipulation of the argument contactno leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-235243.
Credit: cna@vuldb.com
Affected Software | Affected Version | How to fix |
---|---|---|
Campcodes Chic Beauty Salon | =1.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2023-3881 is classified as a critical vulnerability in Campcodes Beauty Salon Management System.
CVE-2023-3881 allows for SQL injection through the manipulation of the contact number in the /admin/forgot-password.php file.
To fix CVE-2023-3881, it is recommended to validate and sanitize user input in the affected file to prevent SQL injection.
CVE-2023-3881 affects version 1.0 of Campcodes Beauty Salon Management System.
If your system is vulnerable to CVE-2023-3881, you should apply patches and implement input validation immediately.