CVE-2023-3068

MediumCVSS 6.3

Published: 02/06/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.78%

51th percentile - higher than 51% of all known CVEs

Summary

A critical vulnerability has been found in Campcodes Retro Cellphone Online Store version 1.0. Manipulation of the 'category' argument in the /admin/modal_add_product.php file leads to SQL injection, allowing for remote attack execution.

Risk Assessment

This vulnerability poses a serious threat to data security as it allows attackers to remotely execute unauthorized queries against the database.

Recommendation

It is recommended to immediately update the system to the latest version to eliminate this vulnerability and implement additional security measures to protect against SQL injections.

Original NVD description (English source)

A vulnerability classified as critical has been found in Campcodes Retro Cellphone Online Store 1.0. Affected is an unknown function of the file /admin/modal_add_product.php. The manipulation of the argument category leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-230580.