Campcodes Retro Basketball Shoes Online Store contactus.php sql injection
CVE-2023-2206

9.8CRITICAL

Key Information:

Vendor
Campcodes
Status
Retro Basketball Shoes Online Store
Vendor
CVE Published:
21 April 2023

Summary

A vulnerability has been identified in Campcodes Retro Basketball Shoes Online Store 1.0 located in the 'contactus.php' file. This flaw allows remote attackers to perform SQL injection attacks by manipulating the 'email' parameter. If exploited, this vulnerability can lead to unauthorized access to the underlying database. The public nature of this exploit raises significant security concerns, as attackers may utilize it to compromise sensitive information.

Affected Version(s)

Retro Basketball Shoes Online Store 1.0

References

https://vuldb.com/?id.226971
vdb-entrytechnical-description
https://vuldb.com/?ctiid.226971
signaturepermissions-required
https://github.com/E1CHO/cve_hub/blob/main/Retro%20Basket...
exploit

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

SSL_Seven_Security Lab_WangZhiQiang_XiaoZiLong (VulDB User)
.
CVE-2023-2206 : Campcodes Retro Basketball Shoes Online Store contactus.php sql injection | SecurityVulnerability.io