CVE-2023-3881

A vulnerability classified as critical was found in Campcodes Beauty Salon Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/forgot-password.php. The manipulation of the argument contactno leads to sql injection. The attack can be launched...

CVE-2023-3881 Campcodes Beauty Salon Management System forgot-password.php sql injection

A vulnerability classified as critical was found in Campcodes Beauty Salon Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/forgot-password.php. The manipulation of the argument contactno leads to sql injection. The attack can be launched...

CVE-2023-3881

Campcodes Beauty Salon Management System 1.0 is affected in the /admin/forgot-password.php function. The vulnerability arises from unsafely handling the contactno parameter, enabling remote SQL injection. Exploitation has been disclosed publicly. Remediation/mitigation notes from connected source...