---
id: CVE-2023-2205
title: A vulnerability was found in Campcodes Retro Basketball Shoes Online Store 1.0
summary: >-
  A vulnerability was found in Campcodes Retro Basketball Shoes Online Store
  1.0. It has been rated as critical. Affected by this issue is some unknown
  functionality of the file /function/login.php. The manipulation of the
  argument email l…
severity: medium
cvss: 6.3
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L'
cwe:
  - CWE-89
vendor: campcodes
product: retro_basketball_shoes_online_store
affected:
  - retro_basketball_shoes_online_store = 1.0
published: '2023-04-21'
updated: '2026-07-31'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2023-2205'
references:
  - url: >-
      https://github.com/E1CHO/cve_hub/blob/main/Retro%20Basketball%20Shoes%20Online%20Store/Retro%20Basketball%20Shoes%20Online%20Store%20-%20vuln%201.pdf
    label: cna@vuldb.com
  - url: 'https://vuldb.com/?ctiid.226970'
    label: cna@vuldb.com
  - url: 'https://vuldb.com/?id.226970'
    label: cna@vuldb.com
  - url: >-
      https://github.com/E1CHO/cve_hub/blob/main/Retro%20Basketball%20Shoes%20Online%20Store/Retro%20Basketball%20Shoes%20Online%20Store%20-%20vuln%201.pdf
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://vuldb.com/?ctiid.226970'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://vuldb.com/?id.226970'
    label: af854a3a-2127-422b-91ae-364da2661108
tags:
  - nvd
epss: 0.00612
epssPercentile: 0.46996
ingestedAt: '2026-07-31T19:01:34.672Z'
---

## Overview

A vulnerability was found in Campcodes Retro Basketball Shoes Online Store 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /function/login.php. The manipulation of the argument email leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-226970 is the identifier assigned to this vulnerability.

## Affected

- `retro_basketball_shoes_online_store = 1.0`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.