CVE-2023-7150 MEDIUM

CVE-2023-7150: Campcodes Chic Beauty Salon Product product-list.php unrestricted upload

Vendor Campcodes
Product Chic Beauty Salon
Weakness CWE-434 · Unrestricted file upload
Published December 29, 2023
Last update November 20, 2024
View on NVD All CVEs

CVSS base score

4.7/10
Attack vector Network
Attack complexity Low
Privileges required High
User interaction None
Confidentiality Low
Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

What the vulnerability does

01Description

A vulnerability classified as critical was found in Campcodes Chic Beauty Salon 20230703. Affected by this vulnerability is an unknown functionality of the file product-list.php of the component Product Handler. The manipulation leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-249157 was assigned to this vulnerability.

Key dates

02Disclosure timeline

December 29, 2023 CVE published
November 20, 2024 Record updated

Related vulnerabilities

04Related CVE

CVE-2024-49216 WordPress Feed Comments Number plugin <= 0.2.1 - Arbitrary File Upload vulnerability CVE-2023-31428 CLI allows upload or transfer files of dangerous types CVE-2022-0945 Stored XSS viva axd and cshtml file upload in star7th/showdoc in star7th/showdoc CVE-2025-12291 ashymuzuro Full-Ecommece-Website/Muzuro Ecommerce System Add Product index.php unrestricted upload CVE-2025-14582 campcodes Online Student Enrollment System index.php unrestricted upload