CVE-2025-4712

A vulnerability has been found in Campcodes Sales and Inventory System 1.0 and classified as critical. This vulnerability affects unknown code of the file /pages/accountsummary.php. The manipulation of the argument cid leads to sql injection. The attack can be initiated remotely. The exploit has...

CVE-2025-4712 Campcodes Sales and Inventory System account_summary.php sql injection

A vulnerability has been found in Campcodes Sales and Inventory System 1.0 and classified as critical. This vulnerability affects unknown code of the file /pages/accountsummary.php. The manipulation of the argument cid leads to sql injection. The attack can be initiated remotely. The exploit has...

New Relic: Restricted user can view all account invoices, payment method details, PII of account owner through zoura_api endpoints

Around November of last year you switched to using Zoura https://www.zuora.com/ to handle your New Relic customer subscriptions. As a restricted user without administrative privileges, I am unable to view and data associated with the billing page https://rpm.newrelic.com/accounts/1523936/payments...