CVE-2025-7537

CVE-2025-7537 affects Campcodes Sales and Inventory System 1.0. The vulnerability is an SQL injection in the file “/pages/product_update.php” caused by improper handling of the ID parameter, enabling remote exploitation. Public exploit/disclosure is noted. Impact is described as high/critical dep...

CVE-2025-7535

A vulnerability was found in Campcodes Sales and Inventory System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /pages/reprintcash.php. The manipulation of the argument sid leads to sql injection. The attack can be launched remotely...

CVE-2025-7536 Campcodes Sales and Inventory System receipt_credit.php sql injection

A vulnerability was found in Campcodes Sales and Inventory System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /pages/receiptcredit.php. The manipulation of the argument sid leads to sql injection. The attack may be launched remotely. The...

CVE-2025-7536

CVE-2025-7536 affects Campcodes Sales and Inventory System 1.0. Affected component: the file /pages/receipt_credit.php, where manipulating the sid parameter triggers a SQL injection. Exploitation is remote and the exploit has been disclosed publicly. Several sources (NVD, RH, etc.) cite a critica...

CVE-2025-7536 Campcodes Sales and Inventory System receipt_credit.php sql injection

A vulnerability was found in Campcodes Sales and Inventory System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /pages/receiptcredit.php. The manipulation of the argument sid leads to sql injection. The attack may be launched remotely. The...

CVE-2025-7535 Campcodes Sales and Inventory System reprint_cash.php sql injection

A vulnerability was found in Campcodes Sales and Inventory System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /pages/reprintcash.php. The manipulation of the argument sid leads to sql injection. The attack can be launched remotely...

CVE-2025-7535

CVE-2025-7535 affects Campcodes Sales and Inventory System 1.0. The vulnerability is in an unknown function of /pages/reprint_cash.php where manipulation of the sid parameter enables SQL injection. Exploitation is possible remotely and public disclosure has occurred. Connected sources confirm the...

CVE-2025-7535 Campcodes Sales and Inventory System reprint_cash.php sql injection

A vulnerability was found in Campcodes Sales and Inventory System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /pages/reprintcash.php. The manipulation of the argument sid leads to sql injection. The attack can be launched remotely...

CVE-2025-7537: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in Campcodes Sales and Inventory System 1.0. This affects an unknown part of the file /pages/productupdate.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

CVE-2025-7538: Unrestricted Upload of File with Dangerous Type

A vulnerability classified as critical was found in Campcodes Sales and Inventory System 1.0. This vulnerability affects unknown code of the file /pages/productupdate.php. The manipulation of the argument image leads to unrestricted upload. The attack can be initiated remotely. The exploit has be...

CVE-2025-7535: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Campcodes Sales and Inventory System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /pages/reprintcash.php. The manipulation of the argument sid leads to sql injection. The attack can be launched remotely...

PT-2025-29380 · Campcodes · Campcodes Sales/Inventory System

Name of the Vulnerable Software and Affected Versions: Campcodes Sales and Inventory System version 1.0 Description: A critical vulnerability exists in Campcodes Sales and Inventory System 1.0. The issue affects an unknown functionality within the /pages/receipt credit.php file. Manipulation of t...

PT-2025-29383 · Campcodes · Campcodes Sales/Inventory System

Name of the Vulnerable Software and Affected Versions: Campcodes Sales and Inventory System version 1.0 Description: A critical vulnerability exists in Campcodes Sales and Inventory System that allows for unrestricted file upload. The vulnerability affects unknown code within the /pages/product...

CVE-2025-7536: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Campcodes Sales and Inventory System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /pages/receiptcredit.php. The manipulation of the argument sid leads to sql injection. The attack may be launched remotely. The...

CVE-2025-7470

A vulnerability was found in Campcodes Sales and Inventory System 1.0. It has been classified as critical. Affected is an unknown function of the file /pages/productadd.php. The manipulation of the argument image leads to unrestricted upload. It is possible to launch the attack remotely. The...

CVE-2025-7469

A vulnerability was found in Campcodes Sales and Inventory System 1.0 and classified as critical. This issue affects some unknown processing of the file /pages/productadd.php. The manipulation of the argument prodname leads to sql injection. The attack may be initiated remotely. The exploit has...

CVE-2025-7470 Campcodes Sales and Inventory System product_add.php unrestricted upload

A vulnerability was found in Campcodes Sales and Inventory System 1.0. It has been classified as critical. Affected is an unknown function of the file /pages/productadd.php. The manipulation of the argument image leads to unrestricted upload. It is possible to launch the attack remotely. The...

CVE-2025-7470 Campcodes Sales and Inventory System product_add.php unrestricted upload

A vulnerability was found in Campcodes Sales and Inventory System 1.0. It has been classified as critical. Affected is an unknown function of the file /pages/productadd.php. The manipulation of the argument image leads to unrestricted upload. It is possible to launch the attack remotely. The...

CVE-2025-7470

CVE-2025-7470 affects Campcodes Sales and Inventory System 1.0. The vulnerability is in the /pages/product_add.php file where manipulating the image parameter enables unrestricted file upload from remote attackers. Public disclosure of the exploit is noted across multiple sources. Root cause: ins...

CVE-2025-7469 Campcodes Sales and Inventory System product_add.php sql injection

A vulnerability was found in Campcodes Sales and Inventory System 1.0 and classified as critical. This issue affects some unknown processing of the file /pages/productadd.php. The manipulation of the argument prodname leads to sql injection. The attack may be initiated remotely. The exploit has...