CVE-2025-9922

A security vulnerability has been detected in Campcodes Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /index.php. Such manipulation of the argument page leads to cross site scripting. The attack can be launched remotely. The exploit has bee...

Sales and Inventory System Cross-site Script Vulnerability (CNVD-2026-38242)

Sales and Inventory System is a sales and inventory management system. The Sales and Inventory System has a cross-site scripting vulnerability, which stems from the lack of effective filtering and escaping of data provided by users due to the parameter “page” in the file/index.php. No detailed...

Sales and Inventory System Cross-site Script Vulnerability (CNVD-2026-38241)

Sales and Inventory System is a sales and inventory management system. The Sales and Inventory System has a cross-site scripting vulnerability, which arises from incorrect handling of parameters in the file/index.php, leading to a cross-site scripting attack. No detailed details about the...

SQL Injection Vulnerability in Computer Sales and Inventory System (CNVD-2026-38243)

Computer Sales and Inventory System is an open-source inventory system for computer sales developed by CampCodes Corporation. The Computer Sales and Inventory System has a SQL injection vulnerability, which stems from the lack of validation for external SQL statements in the parameters cash and...

CVE-2025-9923 Campcodes Sales and Inventory System index.php cross site scripting

A flaw has been found in Campcodes Sales and Inventory System 1.0. This affects an unknown part of the file /index.php. Executing manipulation of the argument page can lead to cross site scripting. The attack may be launched remotely. The exploit has been published and may be used...

CVE-2025-9922

A security vulnerability has been detected in Campcodes Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /index.php. Such manipulation of the argument page leads to cross site scripting. The attack can be launched remotely. The exploit has bee...

CVE-2025-9761

A security vulnerability has been detected in Campcodes Online Feeds Product Inventory System 1.0. This vulnerability affects unknown code of the file /feeds/index.php of the component Login. The manipulation of the argument Username leads to sql injection. The attack can be initiated remotely. T...

CVE-2025-9922: Improper Neutralization of Input During Web Page Generation

A security vulnerability has been detected in Campcodes Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /index.php. Such manipulation of the argument page leads to cross site scripting. The attack can be launched remotely. The exploit has bee...

PT-2025-35824

Name of the Vulnerable Software and Affected Versions: Campcodes Sales and Inventory System version 1.0 Description: A flaw has been found in Campcodes Sales and Inventory System 1.0. Manipulation of the page argument in the /index.php file can lead to cross-site scripting. The attack may be...

CVE-2025-9923: Improper Neutralization of Input During Web Page Generation

A flaw has been found in Campcodes Sales and Inventory System 1.0. This affects an unknown part of the file /index.php. Executing manipulation of the argument page can lead to cross site scripting. The attack may be launched remotely. The exploit has been published and may be used...

CVE-2025-9761

A security vulnerability has been detected in Campcodes Online Feeds Product Inventory System 1.0. This vulnerability affects unknown code of the file /feeds/index.php of the component Login. The manipulation of the argument Username leads to sql injection. The attack can be initiated remotely. T...

CVE-2025-9761 Campcodes Online Feeds Product Inventory System Login index.php sql injection

A security vulnerability has been detected in Campcodes Online Feeds Product Inventory System 1.0. This vulnerability affects unknown code of the file /feeds/index.php of the component Login. The manipulation of the argument Username leads to sql injection. The attack can be initiated remotely. T...

CVE-2025-9758

A vulnerability was identified in deepakmisal24 Chemical Inventory Management System up to 1.0. Affected by this vulnerability is an unknown functionality of the file /inventoryform.php. Such manipulation of the argument chemname leads to sql injection. The attack may be performed from remote. Th...

CVE-2025-9758

Deepakmisal24 Chemical Inventory Management System ≤ v1.0 contains a SQL injection in /inventory_form.php when the chem_name argument is manipulated. The vulnerability arises from an insecure handling of user input in an unknown functionality, allowing remote exploitation with no user interaction...

CVE-2025-9794: Improper Neutralization of Special Elements used in an SQL Command

A flaw has been found in Campcodes Computer Sales and Inventory System 1.0. The affected element is an unknown function of the file /pages/postransac.php?action=add. Executing manipulation of the argument cash/firstname can lead to sql injection. The attack may be performed from remote. The explo...

CVE-2025-9761: Improper Neutralization of Special Elements used in an SQL Command

A security vulnerability has been detected in Campcodes Online Feeds Product Inventory System 1.0. This vulnerability affects unknown code of the file /feeds/index.php of the component Login. The manipulation of the argument Username leads to sql injection. The attack can be initiated remotely. T...

SQL Injection Vulnerability in Sales and Inventory System (CNVD-2026-38244)

Sales and Inventory System is a sales and inventory management system. The Sales and Inventory System has a SQL injection vulnerability, which stems from the lack of security filtering on the ID parameter in the /pages/settingsupdate.php file of the Setting Handler component. Attackers can exploi...

CVE-2025-7933

A vulnerability classified as critical was found in Campcodes Sales and Inventory System 1.0. This vulnerability affects unknown code of the file /pages/settingsupdate.php of the component Setting Handler. The manipulation of the argument ID leads to sql injection. The attack can be initiated...

CVE-2025-7933

A vulnerability classified as critical was found in Campcodes Sales and Inventory System 1.0. This vulnerability affects unknown code of the file /pages/settingsupdate.php of the component Setting Handler. The manipulation of the argument ID leads to sql injection. The attack can be initiated...

CVE-2025-7933 Campcodes Sales and Inventory System Setting settings_update.php sql injection

A vulnerability classified as critical was found in Campcodes Sales and Inventory System 1.0. This vulnerability affects unknown code of the file /pages/settingsupdate.php of the component Setting Handler. The manipulation of the argument ID leads to sql injection. The attack can be initiated...