CVE-2023-3695

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A vulnerability classified as critical has been found in Campcodes Beauty Salon Management System 1.0. Affected is an unknown function of the file add-product.php. The manipulation of the argument category leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-234252.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

No affected versions have been published.

Timeline

Published: Jul 17, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-369509.8TOTOLINK X5000R V9.1.0u.6118_B20201102 and TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the http_ho CVE-2023-369529.8TOTOLINK CP300+ V5.2cu.7594_B20200910 was discovered to contain a stack overflow via the pingIp parameter in the function setDiagnosisCfg.CVE-2023-369539.8TOTOLINK CP300+ V5.2cu.7594_B20200910 and before is vulnerable to command injection.CVE-2023-369549.8TOTOLINK CP300+ V5.2cu.7594_B20200910 and before is vulnerable to command injection.CVE-2023-369559.8TOTOLINK CP300+ <=V5.2cu.7594_B20200910 was discovered to contain a stack overflow via the File parameter in the function UploadCustomModule CVE-2023-36969.8Prototype Pollution in GitHub repository automattic/mongoose prior to 7.3.4.CVE-2023-369687.2A SQL Injection vulnerability detected in Food Ordering System v1.0 allows attackers to run commands on the database by sending crafted SQL CVE-2023-369698.8CMS Made Simple v2.2.17 is vulnerable to Remote Command Execution via the File Upload Function.CVE-2023-36978.8Printer service fails to adequately handle user input, allowing an remote unauthorized users to navigate beyond the intended directory struc CVE-2023-369705.4A Cross-site scripting (XSS) vulnerability in CMS Made Simple v2.2.17 allows remote attackers to inject arbitrary web script or HTML via the CVE-2023-36988.1Printer service fails to adequately handle user input, allowing an remote unauthorized users to navigate beyond the intended directory struc CVE-2023-369805.3An issue in Ethereum Blockchain v0.1.1+commit.6ff4cd6 cause the balance to be zeroed out when the value of betsize+casino.balance exceeds th