CVE-2023-3875: A vulnerability has been found in Campcodes Beauty Salon Management System 0.1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/del_feedba...

Summary

A vulnerability has been found in Campcodes Beauty Salon Management System 0.1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/del_feedback.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely...

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software

Vendor	Product	Affected versions
campcodes	beauty_salon_management_system	0.1.0 `cpe:2.3:a:campcodes:beauty_salon_management_system:0.1.0:::::::*`

Original advisory text

A vulnerability has been found in Campcodes Beauty Salon Management System 0.1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/del_feedba...

A vulnerability has been found in Campcodes Beauty Salon Management System 0.1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/del_feedback.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-235237 was assigned to this vulnerability.

References

https://github.com/E1CHO/cve_hub/blob/main/Beauty%20Salon%20Management%20System/... Exploit Third Party Advisory
https://vuldb.com/?ctiid.235237 Permissions Required Third Party Advisory
https://vuldb.com/?id.235237 Third Party Advisory