CVE-2024-2770

A vulnerability was found in Campcodes Complete Online Beauty Parlor Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/contact-us.php. The manipulation of the argument email leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-257606 is the identifier assigned to this vulnerability.

• CWE-89

• https://github.com/E1CHO/cve_hub/blob/main/Complete%20Online%20Beauty%20Parlor%20Management%20System/Complete%20Online%20Beauty%20Parlor%20Management%20System%20-%20vuln%204.pdfExploit
• https://vuldb.com/?ctiid.257606Permissions Required, VDB Entry
• https://vuldb.com/?id.257606Permissions Required, VDB Entry
• https://github.com/E1CHO/cve_hub/blob/main/Complete%20Online%20Beauty%20Parlor%20Management%20System/Complete%20Online%20Beauty%20Parlor%20Management%20System%20-%20vuln%204.pdfExploit
• https://vuldb.com/?ctiid.257606Permissions Required, VDB Entry
• https://vuldb.com/?id.257606Permissions Required, VDB Entry

Published

Mar 21, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-27686Mikrotik RouterOS (x86) 6.40.5 through 6.49.10 (fixed in 7) …7.5
• CVE-2024-27689Stupid Simple CMS v1.2.4 was discovered to contain a Cross-S…8.8
• CVE-2024-2769A vulnerability was detected in Campcodes Complete Online Be…6.5
• CVE-2024-27692Rejected reason: * REJECT ** DO NOT USE THIS CANDIDATE NUMBE…
• CVE-2024-27694FlyCms v1.0 was discovered to contain a Cross-Site Request F…7.4
• CVE-2024-27698Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2024-27703Cross Site Scripting vulnerability in Leantime 3.0.6 allows …5.4
• CVE-2024-27705Cross Site Scripting vulnerability in Leantime v3.0.6 allows…7.6
• CVE-2024-27706Cross Site Scripting vulnerability in Huly Platform v.0.6.20…6.1
• CVE-2024-27707Server Side Request Forgery (SSRF) vulnerability in hcengine…4.3
• CVE-2024-27708Iframe injection vulnerability in airc.pt/solucoes-servicos.…9.6
• CVE-2024-27709SQL Injection vulnerability in Eskooly Web Product v.3.0 all…9.8