CVE-2023-3881

Name of the Vulnerable Software and Affected Versions Campcodes Beauty Salon Management System version 1.0

Description A critical vulnerability was found in the system, affecting an unknown functionality of the file /admin/forgot-password.php. The manipulation of the contactno argument leads to sql injection. The attack can be launched remotely.

Recommendations For Campcodes Beauty Salon Management System version 1.0, consider disabling the /admin/forgot-password.php file or restricting access to it until a patch is available. As a temporary workaround, avoid using the contactno argument in the affected file to minimize the risk of exploitation.