CVE-2025-10415: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was determined in Campcodes Grocery Sales and Inventory System 1.0. This affects an unknown function of the file /ajax.php?action=savesupplier. Executing manipulation of the argument ID can lead to sql injection. The attack may be performed from remote. The exploit has been public...

CVE-2025-10414: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Campcodes Grocery Sales and Inventory System 1.0. The impacted element is an unknown function of the file /ajax.php?action=savecustomer. Performing manipulation of the argument ID results in sql injection. The attack is possible to be carried out remotely. The exploit...

CVE-2025-10413: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in Campcodes Grocery Sales and Inventory System 1.0. The affected element is an unknown function of the file /ajax.php?action=deletecustomer. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit has been...

Grocery Sales and Inventory System SQL Injection Vulnerability (CNVD-2026-38238)

Grocery Sales and Inventory System is a system for grocery sales and inventory management. The Grocery Sales and Inventory System has a SQL injection vulnerability, which stems from the lack of validation for external input SQL statements in the /ajax.php?action=deletesales file’s parameters...

Grocery Sales and Inventory System SQL Injection Vulnerability (CNVD-2026-38239)

Grocery Sales and Inventory System is a system for grocery sales and inventory management. The Grocery Sales and Inventory System has a SQL injection vulnerability, which stems from the lack of validation for external input SQL statements in the /ajax.php?action=savereceiving file’s parameters...

CVE-2025-10109: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was determined in Campcodes Online Loan Management System 1.0. This issue affects some unknown processing of the file /ajax.php?action=deletepayment. Executing manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit has been...

CVE-2025-10030: Improper Neutralization of Special Elements used in an SQL Command

A weakness has been identified in Campcodes Grocery Sales and Inventory System 1.0. This issue affects some unknown processing of the file /ajax.php?action=savereceiving. Executing manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit has been...

CVE-2025-9744: Improper Neutralization of Special Elements used in an SQL Command

A weakness has been identified in Campcodes Online Loan Management System 1.0. The affected element is an unknown function of the file /ajax.php?action=login. Executing manipulation of the argument Username can lead to sql injection. The attack can be launched remotely. The exploit has been made...

CVE-2025-9504: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was detected in Campcodes Online Loan Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /ajax.php?action=saveplan. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit is now publ...

CVE-2025-9502: Improper Neutralization of Special Elements used in an SQL Command

A weakness has been identified in Campcodes Online Loan Management System 1.0. This impacts an unknown function of the file /ajax.php?action=savepayment. Executing manipulation of the argument loanid can lead to sql injection. The attack may be launched remotely. The exploit has been made availab...

CVE-2025-9506: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in Campcodes Online Loan Management System 1.0. This affects an unknown part of the file /ajax.php?action=deleteplan. Such manipulation of the argument ID leads to sql injection. The attack may be performed from a remote location. The exploit has been disclosed to t...

CVE-2025-9505: Improper Neutralization of Special Elements used in an SQL Command

A flaw has been found in Campcodes Online Loan Management System 1.0. Affected by this issue is some unknown functionality of the file /ajax.php?action=saveloantype. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. The exploit has been...

CVE-2025-8336: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in Campcodes Online Recruitment Management System 1.0. This vulnerability affects unknown code of the file /admin/ajax.php?action=saveuser. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploi...

CVE-2025-8334: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Campcodes Online Recruitment Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/ajax.php?action=deleterecruitmentstatus. The manipulation of the argument ID leads to sql injection. The attack m...

CVE-2025-8274: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in Campcodes Online Recruitment Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/ajax.php?action=saverecruitmentstatus. The manipulation of the argument ID leads to sql injection. The attack can b...

CVE-2025-7219: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Campcodes Payroll Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /ajax.php?action=deleteallowances. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The...

CVE-2025-7217: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in Campcodes Payroll Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /ajax.php?action=saveposition. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit ha...

CVE-2025-7220: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Campcodes Payroll Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /ajax.php?action=savedeductions. The manipulation of the argument ID leads to sql injection. The attack can be launched...

CVE-2025-7218: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Campcodes Payroll Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /ajax.php?action=deleteposition. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit ha...

CVE-2025-7130: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Campcodes Payroll Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /ajax.php?action=deletepayroll. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The explo...