CVE-2025-14877

The CVE-2025-14877 affects Campcodes Supplier Management System 1.0. A SQL injection vulnerability exists in the /admin/add_retailer.php endpoint, caused by unsafely handling the cmbAreaCode parameter. Attack can be carried out remotely, and a public exploit is available. Remediation/mitigation: ...