PT-2023-32910 · Unknown · Campcodes Chic Beauty Salon

Heishou · Published 2023-12-28 · Updated 2024-05-17 · CVE-2023-7150

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Campcodes Chic Beauty Salon version 20230703

Description A critical vulnerability was found in the Product Handler component of the affected software, specifically in the file product-list.php. This vulnerability allows for unrestricted upload and can be exploited remotely. The exploit has been disclosed to the public.

Recommendations For Campcodes Chic Beauty Salon version 20230703, consider disabling the product-list.php file or restricting access to it until a patch is available to prevent unrestricted upload. Additionally, restrict access to the Product Handler component to minimize the risk of exploitation.

Exploit

Fix

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2023-7150

Affected Products

Campcodes Chic Beauty Salon

References · 10

• 🔥❌ https://github.com/laoquanshi/-Arbitrary-file-upload-vulnerability- · Exploit, Deleted
• https://nvd.nist.gov/vuln/detail/CVE-2023-7150 · Security Note
• https://osv.dev/vulnerability/CVE-2023-7150 · Vendor Advisory
• https://t.me/cibsecurity/73898 · Telegram Post
• https://github.com/laoquanshi/Chic-Vulnerability- · Note
• https://twitter.com/CVEnew/status/1740588076710191523 · Twitter Post
• https://vuldb.com/?ctiid.249157 · Note
• https://t.me/cvenotify/66402 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1740625308556919194 · Twitter Post
• https://vuldb.com/?id.249157 · Note