CVE-2024-2768

· MEDIUMAnalyzed

← All CVEs

CVSS v3.1

6.3

EPSS

0.50%

Published

Mar 21, 2024

Modified

Feb 21, 2025

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

A vulnerability was found in Campcodes Complete Online Beauty Parlor Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/edit-services.php. The manipulation of the argument editid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-257604.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Weaknesses (CWE)

CWE-89

Affected Products (1)

campcodes · complete_online_beauty_parlor_management_systemvulnerable

References (6)

https://github.com/E1CHO/cve_hub/blob/main/Complete%20Online%20Beauty%20Parlor%20Management%20System/Complete%20Online%20Beauty%20Parlor%20Management%20System%20-%20vuln%203.pdf

Exploit

https://vuldb.com/?ctiid.257604

Permissions RequiredVDB Entry

https://vuldb.com/?id.257604