CVE-2023-3880

CVE-2023-3880 affects Campcodes Beauty Salon Management System 1.0. Affected component: /admin/del_service.php; vulnerability arises from manipulating the editid parameter, leading to SQL injection. Exploitation is possible remotely and public exploits exist. Connected sources corroborate the vul...

CVE-2023-3890

Summary: CVE-2023-3890 affects Campcodes Beauty Salon Management System 1.0. The vulnerability is a cross-site scripting flaw in an unknown portion of /admin/edit-accepted-appointment.php caused by unsafely manipulating the id parameter. It can be exploited remotely and exploitation has been disc...

CVE-2023-3883

CVE-2023-3883 affects Campcodes Beauty Salon Management System 1.0, with a cross-site scripting vulnerability in an unknown part of /admin/add-category.php. The issue arises from manipulation of the name argument, allowing remote initiation of an attack and public disclosure of the exploit. Explo...

CVE-2023-3882

CVE-2023-3882 affects Campcodes Beauty Salon Management System 1.0. The vulnerable component is the file /admin/edit-accepted-appointment.php, where manipulating the value of the contactno parameter enables a SQL injection. The impact includes potential exposure/alteration of data; exploitation i...

CVE-2023-3886

CVE-2023-3886 affects Campcodes Beauty Salon Management System 1.0. A vulnerability in /admin/invoice.php, via the inv_id parameter, allows cross-site scripting. The issue can be exploited remotely and the exploit has been disclosed publicly. Impact is confined to client-side data integrity (I) w...

CVE-2023-3881

Campcodes Beauty Salon Management System 1.0 is affected in the /admin/forgot-password.php function. The vulnerability arises from unsafely handling the contactno parameter, enabling remote SQL injection. Exploitation has been disclosed publicly. Remediation/mitigation notes from connected source...

CVE-2023-3807

CVE-2023-3807 affects Campcodes Beauty Salon Management System 1.0. The vulnerability is in an unknown function of edit_product.php where manipulating the id parameter causes a SQL injection. The attack is remote and exploits have been disclosed publicly. No official patch/version fix is provided...

CVE-2023-3885

Campcodes Beauty Salon Management System 1.0 contains a cross-site scripting (XSS) vulnerability in /admin/edit_category.php exposed by manipulating the id parameter. The issue is described as requiring user interaction and can be triggered remotely with an exploit disclosed publicly. Affected so...

CVE-2023-3878

CVE-2023-3878 affects Campcodes Beauty Salon Management System 1.0, via the /admin/about-us.php file where the paged(es) parameter enables SQL injection. The vulnerability can be exploited remotely; multiple sources indicate the exploit has been disclosed publicly. Root cause centers on manipulat...

CVE-2023-3876

CVE-2023-3876 affects Campcodes Beauty Salon Management System 1.0. The vulnerability is a SQL injection in the file /admin/search-appointment.php , triggered by manipulating the input parameter searchdata . The report indicates remote feasibility and that the exploit has been disclosed publicly....

CVE-2023-3887

CVE-2023-3887 affects Campcodes Beauty Salon Management System 1.0. A cross-site scripting vulnerability exists in /admin/search-appointment.php via the searchdata parameter. The issue can be triggered remotely and public exploit information has been disclosed (VDB-235249). Connected sources desc...

CVE-2023-3884

CVE-2023-3884 affects Campcodes Beauty Salon Management System 1.0. The vulnerability is a cross-site scripting flaw in unknown code of the file /admin/edit_product.php , triggered by manipulating the id parameter. Documents consistently describe remote initiation and that the exploit has been di...

CVE-2023-3872

CVE-2023-3872 affects Campcodes Beauty Salon Management System 1.0. The vulnerability is in the file /admin/edit-services.php, where the parameter editid can be manipulated to perform a SQL injection. Reports consistently describe remote exploitation and public disclosure of the exploit. Several ...

CVE-2023-3874

CVE-2023-3874 affects Campcodes Beauty Salon Management System 1.0. The vulnerability is an SQL injection in the unknown function of the file /admin/admin-profile.php, triggered by manipulating the adminname parameter. It is exploitable remotely, with multiple sources indicating the exploit has b...

CVE-2023-3879

CVE-2023-3879 concerns Campcodes Beauty Salon Management System v1.0. The vulnerability lies in /admin/del_category.php where manipulation of the id parameter enables SQL injection. This has remote attack potential and, per sources, exploit details have been disclosed publicly. Affected software/...

CVE-2023-3873

CVE-2023-3873 affects Campcodes Beauty Salon Management System 1.0. The vulnerability is an SQL injection in /admin/index.php via the username parameter, with remote access and high-severity impact (confidentiality possibly high). Remediation is not explicitly stated in the initial document; one ...

CVE-2023-3888

CVE-2023-3888 affects Campcodes Beauty Salon Management System 1.0. The vulnerability is in the /admin/admin-profile.php file, where manipulating the adminname parameter leads to a cross-site scripting (XSS) vulnerability. The description indicates the attack can be launched remotely and that the...

CVE-2023-3695

The CVE-2023-3695 entry concerns Campcodes Beauty Salon Management System 1.0. A SQL injection vulnerability exists in an unknown function of add-product.php where manipulating the category parameter enables remote exploitation. Multiple connected sources confirm the flaw in add-product.php/categ...

CVE-2023-3871

CVE-2023-3871 affects Campcodes Beauty Salon Management System 1.0. The vulnerability is in an unknown part of /admin/edit_category.php where manipulation of the id parameter enables SQL injection. Exploitation can be performed remotely, and public disclosures exist. Connected documents corrobora...

CVE-2023-3877

CVE-2023-3877 concerns Campcodes Beauty Salon Management System 1.0, where the /admin/add-services.php file is vulnerable to SQL injection via the cost parameter. The vulnerability arises from insufficient input validation, enabling remote attackers to potentially manipulate the database; public ...

CVE-2023-3875

CVE-2023-3875 affects Campcodes Beauty Salon Management System v0.1.0. The vulnerability exists in /admin/del_feedback.php where the id parameter can be manipulated to perform SQL injection. The issue is exploitable remotely, with public disclosure of exploits noted in multiple sources. Impact pe...