CVE-2023-3873

Summary

CVE-2023-3873 is a critical vulnerability discovered in the Campcodes Beauty Salon Management System 1.0. This issue stems from an unsecured processing of the /admin/index.php file, which is susceptible to SQL injection. By manipulating the argument "username," an attacker can inject malicious SQL code, potentially gaining unauthorized access to sensitive data. The vulnerability can be exploited remotely, and the associated exploit has been made public, increasing the risk for potential attacks. The identifier for this vulnerability is VDB-235235.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.