Description
A vulnerability was detected in Campcodes Complete Online Beauty Parlor Management System 1.0. The affected element is an unknown function of the file /admin/admin-profile.php. The manipulation of the argument adminname/email results in sql injection. The attack may be launched remotely. The exploit is now public and may be used.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Campcodes | Complete Online Beauty Parlor Management System | 1.0 | — |
References
- VDB-257605 | Campcodes Complete Online Beauty Parlor Management System admin-profile.php sql injection vdb-entry technical-description
- VDB-257605 | CTI Indicators (IOB, IOC, TTP, IOA) signature permissions-required
- Submit #302366 | campcodes Complete Online Beauty Parlor Management System ≤1.0 SQL injection third-party-advisory
- Submit #654386 | Campcodes Online Beauty Parlor Management System 1.0 SQL Injection (Duplicate) third-party-advisory
- https://github.com/E1CHO/cve_hub/blob/main/Complete%20Online%20Beauty%20Parlor%20Management%20System/Complete%20Online%20Beauty%20Parlor%20Management%20System%20-%20vuln%205.pdf exploit
- https://www.campcodes.com/ product