Campcodes Beauty Salon Management System edit_product.php sql injection

CVE-2023-3807

What is CVE-2023-3807?

A vulnerability exists in the Campcodes Beauty Salon Management System version 1.0, specifically within the file edit_product.php. This vulnerability is exploited through manipulation of the argument 'id', enabling attackers to execute unauthorized SQL commands. The exploit can be executed remotely, posing a significant risk to the application's database integrity. Public disclosure of the exploit raises concerns regarding potential attacks, emphasizing the need for immediate mitigation.

References