CVE-2025-10436: Improper Neutralization of Special Elements used in an SQL Command

A weakness has been identified in Campcodes Computer Sales and Inventory System 1.0. The impacted element is an unknown function of the file /pages/supsearchfrm.php?action=edit. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack remotely. The exploit...

PT-2025-37462

Name of the Vulnerable Software and Affected Versions: Campcodes Computer Sales and Inventory System version 1.0 Description: A weakness exists in Campcodes Computer Sales and Inventory System that allows for SQL injection. The issue is located in an unknown function of the file /pages/sup...

CampCodes Computer Sales and Inventory System SQL Injection Vulnerability

CampCodes Computer Sales and Inventory System is a computerized sales and inventory system from CampCodes Philippines, Inc. CampCodes Computer Sales and Inventory System version 1.0 suffers from a SQL injection vulnerability that stems from incorrect manipulation of the parameter ID in the file...

CVE-2025-10446: Improper Neutralization of Special Elements used in an SQL Command

A security vulnerability has been detected in Campcodes Computer Sales and Inventory System 1.0. The affected element is an unknown function of the file /pages/custsearchfrm.php?action=edit. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely...

CampCodes Computer Sales and Inventory System SQL Injection Vulnerability

CampCodes Computer Sales and Inventory System is a computerized sales and inventory system from CampCodes Philippines. CampCodes Computer Sales and Inventory System version 1.0 suffers from a SQL injection vulnerability that stems from incorrect manipulation of the parameter Username in the file...

CVE-2025-10416

Campcodes Grocery Sales and Inventory System 1.0 has a SQL injection vulnerability in /ajax.php?action=delete_supplier caused by unsafely handling the ID parameter. This remote‑accessible flaw can lead to unauthorized database access and manipulation; public exploits exist. Root cause: improper i...

CVE-2025-10415 Campcodes Grocery Sales and Inventory System ajax.php sql injection

A vulnerability was determined in Campcodes Grocery Sales and Inventory System 1.0. This affects an unknown function of the file /ajax.php?action=savesupplier. Executing manipulation of the argument ID can lead to sql injection. The attack may be performed from remote. The exploit has been public...

CVE-2025-10413

A vulnerability has been found in Campcodes Grocery Sales and Inventory System 1.0. The affected element is an unknown function of the file /ajax.php?action=deletecustomer. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit has been...

CVE-2025-10413

CVE-2025-10413 affects Campcodes Grocery Sales and Inventory System 1.0. The vulnerability is an SQL injection in the file /ajax.php?action=delete_customer, triggered by manipulating the ID parameter. This can be exploited remotely, and public disclosures exist. Connected sources confirm the issu...

CVE-2025-10413: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in Campcodes Grocery Sales and Inventory System 1.0. The affected element is an unknown function of the file /ajax.php?action=deletecustomer. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit has been...

CampCodes Grocery Sales and Inventory System SQL Injection Vulnerability

CampCodes Grocery Sales and Inventory System is a grocery sales and inventory system from CampCodes Philippines. A SQL injection vulnerability exists in Campcodes Grocery Sales and Inventory System version 1.0, which stems from incorrect manipulation of the parameter ID in file/ajax.php, which...

CVE-2025-10414: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Campcodes Grocery Sales and Inventory System 1.0. The impacted element is an unknown function of the file /ajax.php?action=savecustomer. Performing manipulation of the argument ID results in sql injection. The attack is possible to be carried out remotely. The exploit...

CVE-2025-10415: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was determined in Campcodes Grocery Sales and Inventory System 1.0. This affects an unknown function of the file /ajax.php?action=savesupplier. Executing manipulation of the argument ID can lead to sql injection. The attack may be performed from remote. The exploit has been public...

Grocery Sales and Inventory System SQL Injection Vulnerability (CNVD-2026-38239)

Grocery Sales and Inventory System is a system for grocery sales and inventory management. The Grocery Sales and Inventory System has a SQL injection vulnerability, which stems from the lack of validation for external input SQL statements in the /ajax.php?action=savereceiving file’s parameters...

Grocery Sales and Inventory System SQL Injection Vulnerability (CNVD-2026-38238)

Grocery Sales and Inventory System is a system for grocery sales and inventory management. The Grocery Sales and Inventory System has a SQL injection vulnerability, which stems from the lack of validation for external input SQL statements in the /ajax.php?action=deletesales file’s parameters...

Grocery Sales and Inventory System Cross-site Scripting Vulnerability (CNVD-2026-38240)

Grocery Sales and Inventory System is a software application for grocery sales and inventory management. The system has a cross-site scripting vulnerability, which stems from the lack of effective filtering and escaping of data provided by users due to the parameter “page”. No detailed informatio...

CVE-2025-40641

Cross-site Scripting XSS vulnerability stored in Multi-Purpose Inventory Management System, consisting of a stored XSS due to lack of proper validation of user input by sending a POST request using the productname parameter in /ControllerProducts/update. This vulnerability could allow a remote us...

CVE-2025-40641 Stored Cross-Site Scripting (XSS) in the Multi-purpose Inventory Management System

Cross-site Scripting XSS vulnerability stored in Multi-Purpose Inventory Management System, consisting of a stored XSS due to lack of proper validation of user input by sending a POST request using the productname parameter in /ControllerProducts/update. This vulnerability could allow a remote us...

CVE-2025-10032 Campcodes Grocery Sales and Inventory System index.php cross site scripting

A vulnerability was detected in Campcodes Grocery Sales and Inventory System 1.0. The affected element is an unknown function of the file /index.php. The manipulation of the argument page results in cross site scripting. The attack can be executed remotely. The exploit is now public and may be us...

CVE-2025-10031: Improper Neutralization of Special Elements used in an SQL Command

A security vulnerability has been detected in Campcodes Grocery Sales and Inventory System 1.0. Impacted is an unknown function of the file /ajax.php?action=deletesales. The manipulation of the argument ID leads to sql injection. Remote exploitation of the attack is possible. The exploit has been...