CVE-2025-10562: Improper Neutralization of Special Elements used in an SQL Command

A flaw has been found in Campcodes Grocery Sales and Inventory System 1.0. This affects an unknown function of the file /ajax.php?action=saveproduct. This manipulation of the argument ID causes sql injection. Remote exploitation of the attack is possible. The exploit has been published and may be...

CVE-2025-10563: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in Campcodes Grocery Sales and Inventory System 1.0. This impacts an unknown function of the file /ajax.php?action=savecategory. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit has been disclosed to the...

CVE-2025-52044

In Frappe ERPNext v15.57.5 , the get_stock_balance() function located at erpnext/stock/utils.py is vulnerable to SQL Injection . The root cause is the insufficient validation of the inventory_dimensions_dict parameter, which allows an attacker to inject SQL queries and potentially extract all inf...

CampCodes Grocery Sales and Inventory System SQL注入漏洞

CampCodes Grocery Sales and Inventory System is a grocery sales and inventory system from CampCodes Philippines. A SQL injection vulnerability exists in CampCodes Grocery Sales and Inventory System version 1.0, which stems from incorrect manipulation of the parameter ID in file/ajax.php, which...

Grocery Sales and Inventory System SQL Injection Vulnerability (CNVD-2026-38236)

Grocery Sales and Inventory System is a software application for grocery sales and inventory management. The system has a SQL injection vulnerability, which stems from the lack of validation for external SQL statements in the parameter ID within the file/ajax.php?action=savecustomer. Attackers ca...

PT-2025-38081

Name of the Vulnerable Software and Affected Versions: Campcodes Grocery Sales and Inventory System version 1.0 Description: A vulnerability exists in Campcodes Grocery Sales and Inventory System 1.0. The issue is related to SQL injection within an unknown function of the file...

PT-2025-37984

Name of the Vulnerable Software and Affected Versions: Frappe ERPNext version 15.57.5 Description: Frappe ERPNext version 15.57.5 contains a SQL injection issue in the get stock balance function located at erpnext/stock/utils.py. An attacker can inject a SQL query into the inventory dimensions di...

CVE-2025-52044

In Frappe ERPNext v15.57.5, the function getstockbalance at erpnext/stock/utils.py is vulnerable to SQL Injection, which allows an attacker to extract all information from databases by injecting SQL query into inventorydimensionsdict parameter...

Grocery Sales and Inventory System SQL Injection Vulnerability (CNVD-2026-38235)

Grocery Sales and Inventory System is a system for grocery sales and inventory management. The Grocery Sales and Inventory System has a SQL injection vulnerability, which stems from the lack of validation for external SQL statements in the parameter ID in the file/ajax.php?action=deletecustomer...

CVE-2025-52044

In Frappe ERPNext v15.57.5, the function getstockbalance at erpnext/stock/utils.py is vulnerable to SQL Injection, which allows an attacker to extract all information from databases by injecting SQL query into inventorydimensionsdict parameter...

CampCodes Grocery Sales and Inventory System SQL注入漏洞

CampCodes Grocery Sales and Inventory System is a grocery sales and inventory system from CampCodes Philippines. A SQL injection vulnerability exists in CampCodes Grocery Sales and Inventory System version 1.0, which stems from incorrect manipulation of the parameter ID in file/ajax.php, which...

Grocery Sales and Inventory System SQL Injection Vulnerability (CNVD-2026-38237)

Grocery Sales and Inventory System is a software application for grocery sales and inventory management. The system has a SQL injection vulnerability, which stems from the lack of validation for external SQL statements in the parameter ID within the file/ajax.php?action=savesupplier. Attackers ca...

CVE-2025-10566: Improper Neutralization of Input During Web Page Generation

A vulnerability was identified in Campcodes Grocery Sales and Inventory System 1.0. Affected by this issue is some unknown functionality of the file /index.php?page=users. The manipulation of the argument page leads to cross site scripting. It is possible to initiate the attack remotely. The...

CVE-2025-10446

CVE-2025-10446 affects Campcodes Computer Sales and Inventory System 1.0. The vulnerability is an SQL injection in an unknown function of the file /pages/cust_searchfrm.php?action=edit, triggered by manipulating the ID parameter. Exploitation can be conducted remotely and the exploit has been pub...

CVE-2025-10446 Campcodes Computer Sales and Inventory System cust_searchfrm.php sql injection

A security vulnerability has been detected in Campcodes Computer Sales and Inventory System 1.0. The affected element is an unknown function of the file /pages/custsearchfrm.php?action=edit. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely...

CVE-2025-10445 Campcodes Computer Sales and Inventory System us_transac.php sql injection

A weakness has been identified in Campcodes Computer Sales and Inventory System 1.0. Impacted is an unknown function of the file /pages/ustransac.php?action=add. Executing manipulation of the argument Username can lead to sql injection. The attack may be performed from remote. The exploit has bee...

CVE-2025-10445 Campcodes Computer Sales and Inventory System us_transac.php sql injection

A weakness has been identified in Campcodes Computer Sales and Inventory System 1.0. Impacted is an unknown function of the file /pages/ustransac.php?action=add. Executing manipulation of the argument Username can lead to sql injection. The attack may be performed from remote. The exploit has bee...

CVE-2025-10436

A weakness has been identified in Campcodes Computer Sales and Inventory System 1.0. The impacted element is an unknown function of the file /pages/supsearchfrm.php?action=edit. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack remotely. The exploit...

CVE-2025-10436

CVE-2025-10436 affects Campcodes Computer Sales and Inventory System 1.0. The vulnerability is a SQL injection in the unknown function of /pages/sup_searchfrm.php?action=edit, triggered by manipulating the ID parameter. It is exploitable remotely, and public exploit access is noted. Multiple conn...

CVE-2025-10436 Campcodes Computer Sales and Inventory System sup_searchfrm.php sql injection

A weakness has been identified in Campcodes Computer Sales and Inventory System 1.0. The impacted element is an unknown function of the file /pages/supsearchfrm.php?action=edit. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack remotely. The exploit...