CNNVD-202511-2285 Information

CNNVD ID

CNNVD-202511-2285

CVE-2025-13484

  • CNNVD Published: 2025-11-20

Description (Chinese)

CampCodes Complete Online Beauty Parlor Management System是CampCodes公司的一个在线美容院管理系统。 CampCodes Complete Online Beauty Parlor Management System 1.0版本存在代码注入漏洞,该漏洞源于对文件/admin/customer-list.php中参数Name的错误操作,可能导致跨站脚本攻击。

Description (English)

CampCodes Complete Online Beauty Parlor Management Systems is an online beauty salon management system for CampCodes. The version 1.0 of CampCodes Complete Online Beauty Parlor Management System has a code-in-code loophole, which results from an error in the parameter name of the file/admin/customer-list.php, which may result in a cross-site script attack.

Hazard Level

Critical

Vulnerability Type

代码注入

Affected Vendor

CampCodes

Published

2025-11-20

Last Modified

2026-02-24

References

https://www.campcodes.com/ https://vuldb.com/?id.333084 https://vuldb.com/?ctiid.333084 https://github.com/Abxery/cveee/issues/8 https://vuldb.com/?submit.696054 https://access.redhat.com/security/cve/cve-2025-13484

Share on: