CVE-2023-2206
MediumCVSS 6.3Exploitation Probability (EPSS)
Elevated risk51th percentile - higher than 51% of all known CVEs
Summary
Critical SQL injection vulnerability in Campcodes Retro Basketball Shoes Online Store 1.0 in file contactus.php via manipulation of the email argument. The attack can be performed remotely and the exploit is publicly available.
Risk Assessment
Risk of unauthorized database access, data leakage, or data modification.
Recommendation
Apply the vendor patch or install the latest version of the software.
Original NVD description (English source)
A vulnerability classified as critical has been found in Campcodes Retro Basketball Shoes Online Store 1.0. This affects an unknown part of the file contactus.php. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-226971.