Vulnerability · Published Dec 29, 2023 · Assigned by VulDB
CVE-2023-7150Campcodes Chic Beauty Salon Product product-list.php unrestricted upload
Medium 4.7
In plain English
A medium-severity unrestricted file upload in Chic Beauty Salon from Campcodes. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 51% of all known vulnerabilities).
Official description
A vulnerability classified as critical was found in Campcodes Chic Beauty Salon 20230703. Affected by this vulnerability is an unknown functionality of the file product-list.php of the component Product Handler. The manipulation leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-249157 was assigned to this vulnerability.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Campcodes | Chic Beauty Salon | 20230703 |
Weakness: CWE-434 · Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
References
- https://vuldb.com/?id.249157 vdb-entry, technical-description
- https://vuldb.com/?ctiid.249157 signature, permissions-required
- https://github.com/laoquanshi/-Arbitrary-file-upload-vulnerability- broken-link, exploit
- https://github.com/laoquanshi/Chic-Vulnerability- related