CNNVD-202512-3884 Information
CNNVD ID
CNNVD-202512-3884
Related CVE
- CNNVD Published: 2025-12-21
Description (Chinese)
CampCodes Complete Online Beauty Parlor Management System是CampCodes公司的一个在线美容院管理系统。 CampCodes Complete Online Beauty Parlor Management System 1.0版本存在代码注入漏洞，该漏洞源于文件/admin/bwdates-reports-details.php中未知函数对参数fromdate处理不当，可能导致跨站脚本攻击。
Description (English)
CampCodes Complete Online Beauty Parlor Management Systems is an online beauty salon management system for CampCodes. There is a code-infusion loophole in version 1.0 of CampCodes Complete Online Beauty Parlor Management System, which stems from the inappropriate handling of parameters fromdate by unknown functions in documents/admin/bwdates-reports-details.php, which may lead to cross-site script attacks.
Hazard Level
Critical
Vulnerability Type
代码注入
Affected Vendor
CampCodes
Published
2025-12-21
Last Modified
2026-02-24
References
https://www.campcodes.com/ https://vuldb.com/?id.337685 https://vuldb.com/?ctiid.337685 https://github.com/funnnxxx/my-cve/issues/1 https://vuldb.com/?submit.718458 https://access.redhat.com/security/cve/cve-2025-14991
Share on: