CVE-2023-3877

Summary

CVE-2023-3877 is a critical vulnerability affecting the Campcodes Beauty Salon Management System 1.0. An attacker can exploit an unknown part of the /admin/add-services.php file by manipulating the cost argument, leading to SQL injection. The attack can be initiated remotely, making this a significant security risk. The exploit for this vulnerability has been disclosed to the public, increasing the likelihood of its use in malicious activities. Associated identifier: VDB-235239.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.