CVE-2023-33777

Summary

CVE-2023-3872 is a newly disclosed critical vulnerability in the Campcodes Beauty Salon Management System 1.0. This issue lies in the unknown code of the file /admin/edit-services.php, where manipulation of the editid argument leads to SQL injection. The exploit can be executed remotely, making it a significant threat. The vulnerability has been made public, and attackers may already be using it, making immediate remediation necessary. VDB-235234 is the identifier assigned to this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.