Grocery Sales and Inventory System SQL Injection Vulnerability (CNVD-2026-38231)

Grocery Sales and Inventory System is a system for grocery sales and inventory management. The Grocery Sales and Inventory System has a SQL injection vulnerability, which stems from the lack of validation for external SQL statements in the parameter ID in the file/ajax.php?action=deletereceiving...

Grocery Sales and Inventory System SQL Injection Vulnerability (CNVD-2026-38229)

Grocery Sales and Inventory System is a software application for grocery sales and inventory management. The system has a SQL injection vulnerability, which stems from the lack of validation for external SQL statements in the parameter ID within the file/ajax.php?action=deletesupplier. Attackers...

CVE-2025-10446

A security vulnerability has been detected in Campcodes Computer Sales and Inventory System 1.0. The affected element is an unknown function of the file /pages/custsearchfrm.php?action=edit. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely...

CVE-2025-10435

A security flaw has been discovered in Campcodes Computer Sales and Inventory System 1.0. The affected element is an unknown function of the file /pages/custedit1.php. The manipulation of the argument ID results in sql injection. The attack may be performed from remote. The exploit has been...

CVE-2025-10413

A vulnerability has been found in Campcodes Grocery Sales and Inventory System 1.0. The affected element is an unknown function of the file /ajax.php?action=deletecustomer. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit has been...

CVE-2025-10566

A vulnerability was identified in Campcodes Grocery Sales and Inventory System 1.0. Affected by this issue is some unknown functionality of the file /index.php?page=users. The manipulation of the argument page leads to cross site scripting. It is possible to initiate the attack remotely. The...

CVE-2025-10566

A vulnerability was identified in Campcodes Grocery Sales and Inventory System 1.0. Affected by this issue is some unknown functionality of the file /index.php?page=users. The manipulation of the argument page leads to cross site scripting. It is possible to initiate the attack remotely. The...

CVE-2025-10566 Campcodes Grocery Sales and Inventory System index.php cross site scripting

A vulnerability was identified in Campcodes Grocery Sales and Inventory System 1.0. Affected by this issue is some unknown functionality of the file /index.php?page=users. The manipulation of the argument page leads to cross site scripting. It is possible to initiate the attack remotely. The...

CVE-2025-10562

CVE-2025-10562 affects Campcodes Grocery Sales and Inventory System v1.0. The flaw is in /ajax.php?action=save_product where manipulation of the ID parameter enables SQL injection, allowing remote exploitation (exploit published). The CVSS indicates high/critical impact across confidentiality, in...

Grocery Sales and Inventory System SQL Injection Vulnerability (CNVD-2026-38235)

Grocery Sales and Inventory System is a system for grocery sales and inventory management. The Grocery Sales and Inventory System has a SQL injection vulnerability, which stems from the lack of validation for external SQL statements in the parameter ID in the file/ajax.php?action=deletecustomer...

CVE-2025-10565: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was determined in Campcodes Grocery Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /ajax.php?action=deletereceiving. Executing manipulation of the argument ID can lead to sql injection. The attack may be performed from remote...

CVE-2025-10562: Improper Neutralization of Special Elements used in an SQL Command

A flaw has been found in Campcodes Grocery Sales and Inventory System 1.0. This affects an unknown function of the file /ajax.php?action=saveproduct. This manipulation of the argument ID causes sql injection. Remote exploitation of the attack is possible. The exploit has been published and may be...

CVE-2025-10563: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in Campcodes Grocery Sales and Inventory System 1.0. This impacts an unknown function of the file /ajax.php?action=savecategory. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit has been disclosed to the...

Grocery Sales and Inventory System SQL Injection Vulnerability (CNVD-2026-38237)

Grocery Sales and Inventory System is a software application for grocery sales and inventory management. The system has a SQL injection vulnerability, which stems from the lack of validation for external SQL statements in the parameter ID within the file/ajax.php?action=savesupplier. Attackers ca...

Grocery Sales and Inventory System SQL Injection Vulnerability (CNVD-2026-38236)

Grocery Sales and Inventory System is a software application for grocery sales and inventory management. The system has a SQL injection vulnerability, which stems from the lack of validation for external SQL statements in the parameter ID within the file/ajax.php?action=savecustomer. Attackers ca...

CVE-2025-10566: Improper Neutralization of Input During Web Page Generation

A vulnerability was identified in Campcodes Grocery Sales and Inventory System 1.0. Affected by this issue is some unknown functionality of the file /index.php?page=users. The manipulation of the argument page leads to cross site scripting. It is possible to initiate the attack remotely. The...

CampCodes Grocery Sales and Inventory System SQL Injection Vulnerability

CampCodes Grocery Sales and Inventory System is a grocery sales and inventory system from CampCodes Philippines. A SQL injection vulnerability exists in CampCodes Grocery Sales and Inventory System version 1.0, which stems from incorrect manipulation of the parameter ID in file/ajax.php, which...

CampCodes Grocery Sales and Inventory System SQL Injection Vulnerability

CampCodes Grocery Sales and Inventory System is a grocery sales and inventory system from CampCodes Philippines. A SQL injection vulnerability exists in CampCodes Grocery Sales and Inventory System version 1.0, which stems from incorrect manipulation of the parameter ID in file/ajax.php, which...

CVE-2025-10564: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Campcodes Grocery Sales and Inventory System 1.0. Affected is an unknown function of the file /ajax.php?action=deletecategory. Performing manipulation of the argument ID results in sql injection. The attack is possible to be carried out remotely. The exploit has been...

CVE-2025-10446

CVE-2025-10446 affects Campcodes Computer Sales and Inventory System 1.0. The vulnerability is an SQL injection in an unknown function of the file /pages/cust_searchfrm.php?action=edit, triggered by manipulating the ID parameter. Exploitation can be conducted remotely and the exploit has been pub...