CVE-2023-3681

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

A vulnerability classified as problematic was found in Campcodes Retro Cellphone Online Store 1.0. This vulnerability affects unknown code of the file /admin/modal_add_product.php. The manipulation of the argument description leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-234226 is the identifier assigned to this vulnerability.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

Vendor	Product	Versions
Campcodes	Retro Cellphone Online Store	1.0
retro_cellphone_online_store_project	retro_cellphone_online_store	1.0

References

https://github.com/E1CHO/cve_hub/blob/main/Retro%20Cellphone%20Online%20Store%20-%20vlun%208.pdfExploit, Third Party Advisory
https://vuldb.com/?ctiid.234226Third Party Advisory
https://vuldb.com/?id.234226Third Party Advisory
https://github.com/E1CHO/cve_hub/blob/main/Retro%20Cellphone%20Online%20Store%20-%20vlun%208.pdfExploit, Third Party Advisory
https://vuldb.com/?ctiid.234226Third Party Advisory
https://vuldb.com/?id.234226Third Party Advisory

Timeline

Published: Jul 15, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-368106.5pypdf is a pure-python PDF library capable of splitting, merging, cropping, and transforming the pages of PDF files. An attacker who uses th CVE-2023-368114.7borgbackup is an opensource, deduplicating archiver with compression and authenticated encryption. A flaw in the cryptographic authenticatio CVE-2023-368129.8OpenTSDB is a open source, distributed, scalable Time Series Database (TSDB). OpenTSDB is vulnerable to Remote Code Execution vulnerability CVE-2023-368138.8Kanboard is project management software that focuses on the Kanban methodology. In versions prior to 1.2.31authenticated user is able to per CVE-2023-368147.5Products.CMFCore are the key framework services for the Zope Content Management Framework (CMF). The use of Python's marshal module to handl CVE-2023-368158.1Sealos is a Cloud Operating System designed for managing cloud-native applications. In version 4.2.0 and prior, there is a permission flaw i CVE-2023-368166.12FA is a Web app to manage Two-Factor Authentication (2FA) accounts and generate their security codes. Cross site scripting (XSS) injection CVE-2023-368179.1`tktchurch/website` contains the codebase for The King's Temple Church website. In version 0.1.0, a Stripe API key was found in the public c CVE-2023-368187.5Discourse is an open source discussion platform. In affected versions a request to create or update custom sidebar section can cause a denia CVE-2023-368196.5Knowage is the professional open source suite for modern business analytics over traditional sources and big data systems. The endpoint `_/k CVE-2023-36829.8A vulnerability, which was classified as critical, was found in Nesote Inout Blockchain EasyPayments 1.0. Affected is an unknown function of CVE-2023-368206.5Micronaut Security is a security solution for applications. Prior to versions 3.1.2, 3.2.4, 3.3.2, 3.4.3, 3.5.3, 3.6.6, 3.7.4, 3.8.4, 3.9.6,