CVE-2025-7469

A vulnerability was found in Campcodes Sales and Inventory System 1.0 and classified as critical. This issue affects some unknown processing of the file /pages/productadd.php. The manipulation of the argument prodname leads to sql injection. The attack may be initiated remotely. The exploit has...

CVE-2025-7469

A vulnerability was found in Campcodes Sales and Inventory System 1.0 and classified as critical. This issue affects some unknown processing of the file /pages/productadd.php. The manipulation of the argument prodname leads to sql injection. The attack may be initiated remotely. The exploit has...

CVE-2025-7470 Campcodes Sales and Inventory System product_add.php unrestricted upload

A vulnerability was found in Campcodes Sales and Inventory System 1.0. It has been classified as critical. Affected is an unknown function of the file /pages/productadd.php. The manipulation of the argument image leads to unrestricted upload. It is possible to launch the attack remotely. The...

CVE-2025-7470 Campcodes Sales and Inventory System product_add.php unrestricted upload

A vulnerability was found in Campcodes Sales and Inventory System 1.0. It has been classified as critical. Affected is an unknown function of the file /pages/productadd.php. The manipulation of the argument image leads to unrestricted upload. It is possible to launch the attack remotely. The...

CVE-2025-7470

CVE-2025-7470 affects Campcodes Sales and Inventory System 1.0. The vulnerability is in the /pages/product_add.php file where manipulating the image parameter enables unrestricted file upload from remote attackers. Public disclosure of the exploit is noted across multiple sources. Root cause: ins...

CVE-2025-7469

CVE-2025-7469 affects Campcodes Sales and Inventory System 1.0. The vulnerability is an SQL injection in the handling of the prod_name argument in the file /pages/product_add.php, caused by improper input processing. Exploitation can be remote and the exploit has been disclosed publicly. The issu...

CVE-2025-7469 Campcodes Sales and Inventory System product_add.php sql injection

A vulnerability was found in Campcodes Sales and Inventory System 1.0 and classified as critical. This issue affects some unknown processing of the file /pages/productadd.php. The manipulation of the argument prodname leads to sql injection. The attack may be initiated remotely. The exploit has...

CVE-2025-7469 Campcodes Sales and Inventory System product_add.php sql injection

A vulnerability was found in Campcodes Sales and Inventory System 1.0 and classified as critical. This issue affects some unknown processing of the file /pages/productadd.php. The manipulation of the argument prodname leads to sql injection. The attack may be initiated remotely. The exploit has...

CampCodes Sales and Inventory System 代码问题漏洞

CampCodes Sales and Inventory System is a sales and inventory system from CampCodes, Inc. A code issue vulnerability exists in version 1.0 of the CampCodes Sales and Inventory System, which stems from an arbitrary file upload due to incorrect manipulation of the parameter image in the file...

PT-2025-29317 · Campcodes · Campcodes Sales/Inventory System

Name of the Vulnerable Software and Affected Versions: Campcodes Sales and Inventory System version 1.0 Description: A critical issue exists in Campcodes Sales and Inventory System 1.0 related to the processing of the /pages/product add.php file. Manipulation of the prod name argument can lead to...

CampCodes Sales and Inventory System 注入漏洞

CampCodes Sales and Inventory System is a sales and inventory system from CampCodes, Inc. An injection vulnerability exists in Campcodes Sales and Inventory System version 1.0, which stems from an incorrect manipulation of the parameter prodname in the file /pages/productadd.php that results in S...

PT-2025-29318 · Campcodes · Campcodes Sales/Inventory System

Name of the Vulnerable Software and Affected Versions: Campcodes Sales and Inventory System version 1.0 Description: A critical issue exists in Campcodes Sales and Inventory System 1.0, allowing for unrestricted file upload. The vulnerability is located in an unknown function within the...

CVE-2025-7469: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Campcodes Sales and Inventory System 1.0 and classified as critical. This issue affects some unknown processing of the file /pages/productadd.php. The manipulation of the argument prodname leads to sql injection. The attack may be initiated remotely. The exploit has...

CVE-2025-7470: Unrestricted Upload of File with Dangerous Type

A vulnerability was found in Campcodes Sales and Inventory System 1.0. It has been classified as critical. Affected is an unknown function of the file /pages/productadd.php. The manipulation of the argument image leads to unrestricted upload. It is possible to launch the attack remotely. The...

CVE-2025-7457

A vulnerability, which was classified as critical, was found in Campcodes Online Movie Theater Seat Reservation System 1.0. This affects an unknown part of the file /admin/managemovie.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely...

CVE-2025-7457

A vulnerability, which was classified as critical, was found in Campcodes Online Movie Theater Seat Reservation System 1.0. This affects an unknown part of the file /admin/managemovie.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely...

CVE-2025-7457

Campcodes Online Movie Theater Seat Reservation System 1.0 is affected by a SQL injection in /admin/manage_movie.php via manipulation of the ID parameter. The vulnerability permits remote exploitation and exploits have been disclosed publicly. Concrete patch/version details are not provided in th...

CVE-2025-7457 Campcodes Online Movie Theater Seat Reservation System manage_movie.php sql injection

A vulnerability, which was classified as critical, was found in Campcodes Online Movie Theater Seat Reservation System 1.0. This affects an unknown part of the file /admin/managemovie.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely...

CVE-2025-7457 Campcodes Online Movie Theater Seat Reservation System manage_movie.php sql injection

A vulnerability, which was classified as critical, was found in Campcodes Online Movie Theater Seat Reservation System 1.0. This affects an unknown part of the file /admin/managemovie.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely...

CVE-2025-7456

A vulnerability, which was classified as critical, has been found in Campcodes Online Movie Theater Seat Reservation System 1.0. Affected by this issue is some unknown functionality of the file /reserve.php. The manipulation of the argument ID leads to sql injection. The attack may be launched...