CVE-2023-3882: Campcodes Beauty Salon Management System edit-accepted-appointment.php sql injection

Published Jul 25, 2023

Updated

A vulnerability, which was classified as critical, has been found in Campcodes Beauty Salon Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/edit-accepted-appointment.php. The manipulation of the argument contactno leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-235244.

Affected Software

1 affected component

Campcodes Beauty Salon Management System=1.0

Event History

Jul 25, 2023

CVE Published

via MITRE·05:00 AM

Data Sourced

via MITRE·05:00 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2023-3882?

CVE-2023-3882 is classified as a critical severity vulnerability.

How does CVE-2023-3882 affect the Campcodes Beauty Salon Management System?

CVE-2023-3882 affects some unknown functionality related to the manipulation of the 'contactno' argument, leading to SQL injection.

How do I fix CVE-2023-3882?

To fix CVE-2023-3882, validate and sanitize all user inputs, especially in the 'contactno' field, to prevent SQL injection.

Which versions of Campcodes Beauty Salon Management System are impacted by CVE-2023-3882?

CVE-2023-3882 impacts version 1.0 of Campcodes Beauty Salon Management System.

What type of vulnerability is CVE-2023-3882?

CVE-2023-3882 is identified as an SQL injection vulnerability.