CVE-2024-2767

A vulnerability was found in Campcodes Complete Online Beauty Parlor Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/forgot-password.php. The manipulation of the argument email leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-257603.

• CWE-89

• https://github.com/E1CHO/cve_hub/blob/main/Complete%20Online%20Beauty%20Parlor%20Management%20System/Complete%20Online%20Beauty%20Parlor%20Management%20System%20-%20vuln%202.pdfExploit
• https://vuldb.com/?ctiid.257603Permissions Required, VDB Entry
• https://vuldb.com/?id.257603Third Party Advisory, VDB Entry
• https://github.com/E1CHO/cve_hub/blob/main/Complete%20Online%20Beauty%20Parlor%20Management%20System/Complete%20Online%20Beauty%20Parlor%20Management%20System%20-%20vuln%202.pdfExploit
• https://vuldb.com/?ctiid.257603Permissions Required, VDB Entry
• https://vuldb.com/?id.257603Third Party Advisory, VDB Entry

Published

Mar 21, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-2766A vulnerability has been found in Campcodes Complete Online …6.5
• CVE-2024-27660D-Link DIR-823G A1V1.0.2B05 was discovered to contain a Null…6.5
• CVE-2024-27661D-Link DIR-823G A1V1.0.2B05 was discovered to contain Null-p…6.5
• CVE-2024-27662D-Link DIR-823G A1V1.0.2B05 was discovered to contain a Null…6.5
• CVE-2024-27665Unifiedtransform v2.X is vulnerable to Stored Cross-Site Scr…5.4
• CVE-2024-27668Flusity-CMS v2.33 is affected by: Cross Site Scripting (XSS)…6.1
• CVE-2024-27673Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2024-27674Macro Expert through 4.9.4 allows BUILTIN\Users:(OI)(CI)(M) …7.8
• CVE-2024-2768A vulnerability was found in Campcodes Complete Online Beaut…6.5
• CVE-2024-27680Flusity-CMS v2.33 is vulnerable to Cross Site Scripting (XSS…6.1
• CVE-2024-27683D-Link Go-RT-AC750 GORTAC750_A1_FW_v101b03 contains a stack-…9.8
• CVE-2024-27684A Cross-site scripting (XSS) vulnerability in dlapn.cgi, dld…6.1