CVE-2025-9692

CVE-2025-9692 affects Campcodes Online Shopping System 1.0. The vulnerability is an SQL injection in /product.php via the p parameter. The attack can be performed remotely, and public exploit details exist. No patch/version fix information is provided in the supplied documents; remediation status...

CVE-2025-9692 Campcodes Online Shopping System product.php sql injection

A vulnerability was found in Campcodes Online Shopping System 1.0. Affected is an unknown function of the file /product.php. Performing manipulation of the argument p results in sql injection. The attack may be initiated remotely. The exploit has been made public and could be used...

CVE-2025-9691

A vulnerability has been found in Campcodes Online Shopping System 1.0. This impacts an unknown function of the file /login.php. Such manipulation of the argument Password leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used...

CVE-2025-9691

A vulnerability has been found in Campcodes Online Shopping System 1.0. This impacts an unknown function of the file /login.php. Such manipulation of the argument Password leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used...

CVE-2025-9691 Campcodes Online Shopping System login.php sql injection

A vulnerability has been found in Campcodes Online Shopping System 1.0. This impacts an unknown function of the file /login.php. Such manipulation of the argument Password leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used...

CVE-2025-9691

CVE-2025-9691 affects Campcodes Online Shopping System 1.0; in /login.php, manipulating the Password argument enables SQL injection. This remote flaw is supported by multiple sources (NVD/Red Hat and others) and, per PT-2025-35361, a temporary mitigation is to restrict access to /login.php. Explo...

CVE-2025-9691 Campcodes Online Shopping System login.php sql injection

A vulnerability has been found in Campcodes Online Shopping System 1.0. This impacts an unknown function of the file /login.php. Such manipulation of the argument Password leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used...

CampCodes Online Shopping System has security vulnerabilities

CampCodes Online Shopping System is an online shopping system from CampCodes, Inc. A security vulnerability exists in version 1.0 of the CampCodes Online Shopping System, which is caused by a SQL injection due to an incorrect manipulation of the parameter Password in file /login.php...

CampCodes Online Shopping System has security vulnerabilities

CampCodes Online Shopping System is an online shopping system from CampCodes, Inc. A security vulnerability exists in version 1.0 of the CampCodes Online Shopping System, which is caused by a SQL injection due to a misbehavior of the parameter p in the file /product.php...

PT-2025-35373

Name of the Vulnerable Software and Affected Versions: Campcodes Advanced Online Voting System version 1.0 Description: A SQL injection issue exists in an unknown functionality of the file /admin/login.php. Manipulation of the Username argument can lead to successful exploitation. The attack can ...

PT-2025-35372

Name of the Vulnerable Software and Affected Versions: Campcodes Online Shopping System version 1.0 Description: A SQL injection issue exists in Campcodes Online Shopping System 1.0. The issue is located in the /product.php file, where manipulation of the p argument can lead to SQL injection. The...

CVE-2025-9694: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was determined in Campcodes Advanced Online Voting System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/login.php. Executing manipulation of the argument Username can lead to sql injection. The attack may be launched remotely. The exploit has...

CVE-2025-9692: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Campcodes Online Shopping System 1.0. Affected is an unknown function of the file /product.php. Performing manipulation of the argument p results in sql injection. The attack may be initiated remotely. The exploit has been made public and could be used...

CVE-2025-9691: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in Campcodes Online Shopping System 1.0. This impacts an unknown function of the file /login.php. Such manipulation of the argument Password leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used...

CVE-2025-9678

A weakness has been identified in Campcodes Online Loan Management System 1.0. The impacted element is an unknown function of the file /ajax.php?action=deleteborrower. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack remotely. The exploit has been...

CVE-2025-9678

A weakness has been identified in Campcodes Online Loan Management System 1.0. The impacted element is an unknown function of the file /ajax.php?action=deleteborrower. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack remotely. The exploit has been...

CVE-2025-9678

CVE-2025-9678 affects Campcodes Online Loan Management System 1.0. The vulnerability is an SQL injection in the /ajax.php?action=delete_borrower endpoint, caused by manipulation of the ID parameter. It can be triggered remotely over the network and is publicly exploit-able according to the source...

CVE-2025-9678 Campcodes Online Loan Management System ajax.php sql injection

A weakness has been identified in Campcodes Online Loan Management System 1.0. The impacted element is an unknown function of the file /ajax.php?action=deleteborrower. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack remotely. The exploit has been...

CVE-2025-9678 Campcodes Online Loan Management System ajax.php sql injection

A weakness has been identified in Campcodes Online Loan Management System 1.0. The impacted element is an unknown function of the file /ajax.php?action=deleteborrower. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack remotely. The exploit has been...

Loan Management System security vulnerabilities

Loan Management System is a loan management system by razormist individual developer. A security vulnerability exists in Campcodes Online Loan Management System version 1.0, which stems from improper manipulation of the parameter ID in the file /ajax.php?action=deleteborrower, which could lead to...