CVE-2023-3881

Summary

CVE-2023-3881 is a critical vulnerability affecting the Campcodes Beauty Salon Management System 1.0. This issue lies in an unidentified functionality of the file /admin/forgot-password.php. An attacker can exploit this vulnerability by manipulating the contactno argument, which leads to SQL injection. The exploit can be executed remotely, making it a significant threat. Public disclosure of the exploit increases the risk of attacks. The associated identifier for this vulnerability is VDB-235243.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.