CNNVD-202510-1698 Information

CNNVD ID

CNNVD-202510-1698

CVE-2025-11663

  • CNNVD Published: 2025-10-13

Description (Chinese)

CampCodes Online Beauty Parlor Management System是菲律宾CampCodes公司的一个在线美容院管理系统。 CampCodes Online Beauty Parlor Management System 1.0版本存在跨站脚本漏洞,该漏洞源于对文件/admin/manage-services.php中参数sername的错误操作,可能导致SQL注入攻击。

Description (English)

CampCodes Online Beauty Parlor Management System is an online beauty salon management system for CampCodes in the Philippines. There is a cross-site script loophole in version 1.0 of CampCodes Online Beauty Parlor Management System, which stems from a mishandling of sername, the parameter in the document/admin/manage-services.php, which may result in an injection attack on SQL.

Hazard Level

High

Vulnerability Type

跨站脚本

Affected Vendor

CampCodes

Published

2025-10-13

Last Modified

2026-02-24

References

https://www.campcodes.com/ https://github.com/HYLCXH/CVE/issues/12 https://vuldb.com/?id.328082 https://vuldb.com/?ctiid.328082 https://vuldb.com/?submit.672848

Share on: