CVE-2024-2766: Campcodes Complete Online Beauty Parlor Management System index.php sql injection
A vulnerability has been found in Campcodes Complete Online Beauty Parlor Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/index.php. The manipulation of the argument username leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-257602 is the identifier assigned to this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-2766?
CVE-2024-2766 is classified as a critical vulnerability.
How does CVE-2024-2766 affect the Campcodes Complete Online Beauty Parlor Management System?
CVE-2024-2766 affects the handling of the username argument in the /admin/index.php file, leading to SQL injection.
How can I mitigate the risk of CVE-2024-2766?
Mitigation for CVE-2024-2766 involves sanitizing user inputs and using prepared statements in SQL queries.
What versions of the software are affected by CVE-2024-2766?
CVE-2024-2766 affects version 1.0 of the Campcodes Complete Online Beauty Parlor Management System.
What type of attack is associated with CVE-2024-2766?
CVE-2024-2766 is associated with SQL injection attacks.