CVE-2024-2768

A vulnerability was found in Campcodes Complete Online Beauty Parlor Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/edit-services.php. The manipulation of the argument editid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-257604.

• CWE-89

• https://github.com/E1CHO/cve_hub/blob/main/Complete%20Online%20Beauty%20Parlor%20Management%20System/Complete%20Online%20Beauty%20Parlor%20Management%20System%20-%20vuln%203.pdfExploit
• https://vuldb.com/?ctiid.257604Permissions Required, VDB Entry
• https://vuldb.com/?id.257604Permissions Required, VDB Entry
• https://github.com/E1CHO/cve_hub/blob/main/Complete%20Online%20Beauty%20Parlor%20Management%20System/Complete%20Online%20Beauty%20Parlor%20Management%20System%20-%20vuln%203.pdfExploit
• https://vuldb.com/?ctiid.257604Permissions Required, VDB Entry
• https://vuldb.com/?id.257604Permissions Required, VDB Entry

Published

Mar 21, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-27662D-Link DIR-823G A1V1.0.2B05 was discovered to contain a Null…6.5
• CVE-2024-27665Unifiedtransform v2.X is vulnerable to Stored Cross-Site Scr…5.4
• CVE-2024-27668Flusity-CMS v2.33 is affected by: Cross Site Scripting (XSS)…6.1
• CVE-2024-2767A vulnerability was found in Campcodes Complete Online Beaut…6.5
• CVE-2024-27673Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2024-27674Macro Expert through 4.9.4 allows BUILTIN\Users:(OI)(CI)(M) …7.8
• CVE-2024-27680Flusity-CMS v2.33 is vulnerable to Cross Site Scripting (XSS…6.1
• CVE-2024-27683D-Link Go-RT-AC750 GORTAC750_A1_FW_v101b03 contains a stack-…9.8
• CVE-2024-27684A Cross-site scripting (XSS) vulnerability in dlapn.cgi, dld…6.1
• CVE-2024-27685SQL Injection vulnerability in Student Record system Using P…7.1
• CVE-2024-27686Mikrotik RouterOS (x86) 6.40.5 through 6.49.10 (fixed in 7) …7.5
• CVE-2024-27689Stupid Simple CMS v1.2.4 was discovered to contain a Cross-S…8.8