CVE-2024-2767

CVSS 3.1 Score 7.8 of 10 (high)

Details

Published Mar 21, 2024
Updated: May 17, 2024
CWE ID 277

Summary

CVE-2024-2767 is a critical vulnerability affecting the Campcodes Complete Online Beauty Parlor Management System version 1.0. The issue lies in the processing of the file /admin/forgot-password.php, where manipulation of the email argument can lead to sql injection. This vulnerability allows remote attackers to exploit the system, and the exploit has been disclosed to the public. The associated identifier for this vulnerability is VDB-257603.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share