CVE-2023-2206

A vulnerability classified as critical has been found in Campcodes Retro Basketball Shoes Online Store 1.0. This affects an unknown part of the file contactus.php. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-226971.

• CWE-89

• https://github.com/E1CHO/cve_hub/blob/main/Retro%20Basketball%20Shoes%20Online%20Store/Retro%20Basketball%20Shoes%20Online%20Store%20-%20vuln%202.pdfExploit, Third Party Advisory
• https://vuldb.com/?ctiid.226971Permissions Required, Third Party Advisory
• https://vuldb.com/?id.226971Third Party Advisory
• https://github.com/E1CHO/cve_hub/blob/main/Retro%20Basketball%20Shoes%20Online%20Store/Retro%20Basketball%20Shoes%20Online%20Store%20-%20vuln%202.pdfExploit, Third Party Advisory
• https://vuldb.com/?ctiid.226971Permissions Required, Third Party Advisory
• https://vuldb.com/?id.226971Third Party Advisory

Published

Apr 21, 2023

Last Modified

Jul 31, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-22054Vulnerability in the MySQL Server product of Oracle MySQL (c…4.9
• CVE-2023-22055Vulnerability in the JD Edwards EnterpriseOne Tools product …6.1
• CVE-2023-22056Vulnerability in the MySQL Server product of Oracle MySQL (c…4.9
• CVE-2023-22057Vulnerability in the MySQL Server product of Oracle MySQL (c…4.9
• CVE-2023-22058Vulnerability in the MySQL Server product of Oracle MySQL (c…4.4
• CVE-2023-22059Vulnerability in the MySQL Server product of Oracle MySQL (c…6.5
• CVE-2023-22060Vulnerability in the Oracle Hyperion Workspace product of Or…7.6
• CVE-2023-22061Vulnerability in the Oracle Business Intelligence Enterprise…5.4
• CVE-2023-22062Vulnerability in the Oracle Hyperion Financial Reporting pro…8.5
• CVE-2023-22064Vulnerability in the MySQL Server product of Oracle MySQL (c…4.9
• CVE-2023-22065Vulnerability in the MySQL Server product of Oracle MySQL (c…4.9
• CVE-2023-22066Vulnerability in the MySQL Server product of Oracle MySQL (c…4.9