CVE-2025-4814

A vulnerability has been found in Campcodes Sales and Inventory System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /pages/supplieradd.php. The manipulation of the argument Name leads to sql injection. The attack can be launched remotely...

CampCodes Online Shopping Portal 注入漏洞

CampCodes Online Shopping Portal is an online shopping portal from CampCodes, Inc. CampCodes Online Shopping Portal suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the parameter Name in the file /my-account.php. An attacker...

PT-2025-21934 · Unknown · Campcodes Online Shopping Portal

Name of the Vulnerable Software and Affected Versions: Campcodes Online Shopping Portal version 1.0 Description: A critical issue affects some unknown processing of the file /my-account.php. The manipulation of the argument Name leads to SQL injection. The attack may be initiated remotely. The...

CVE-2025-4930: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in Campcodes Online Shopping Portal 1.0. Affected is an unknown function of the file /my-cart.php. The manipulation of the argument billingaddress leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

PT-2025-21935 · Unknown · Campcodes Online Shopping Portal

Name of the Vulnerable Software and Affected Versions: Campcodes Online Shopping Portal version 1.0 Description: A critical vulnerability has been found in Campcodes Online Shopping Portal. The issue affects an unknown function of the file /my-cart.php. The manipulation of the billingaddress...

CVE-2025-4929: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Campcodes Online Shopping Portal 1.0. It has been rated as critical. This issue affects some unknown processing of the file /my-account.php. The manipulation of the argument Name leads to sql injection. The attack may be initiated remotely. The exploit has been...

CVE-2025-4900

A vulnerability classified as critical has been found in Campcodes Sales and Inventory System 1.0. Affected is an unknown function of the file /pages/payment.php. The manipulation of the argument cid leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

CVE-2025-4900

A vulnerability classified as critical has been found in Campcodes Sales and Inventory System 1.0. Affected is an unknown function of the file /pages/payment.php. The manipulation of the argument cid leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

CVE-2025-4899

A vulnerability was found in Campcodes Sales and Inventory System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /pages/transactionupdate.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit...

CVE-2025-4899

A vulnerability was found in Campcodes Sales and Inventory System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /pages/transactionupdate.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit...

CVE-2025-4900 Campcodes Sales and Inventory System payment.php sql injection

A vulnerability classified as critical has been found in Campcodes Sales and Inventory System 1.0. Affected is an unknown function of the file /pages/payment.php. The manipulation of the argument cid leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

CVE-2025-4900

CVE-2025-4900 affects Campcodes Sales and Inventory System 1.0. The vulnerability is in the /pages/payment.php file where manipulation of the cid parameter enables SQL injection. Exploitation is reported as remote and the exploit has been disclosed publicly. Affected component is an unknown funct...

CVE-2025-4900 Campcodes Sales and Inventory System payment.php sql injection

A vulnerability classified as critical has been found in Campcodes Sales and Inventory System 1.0. Affected is an unknown function of the file /pages/payment.php. The manipulation of the argument cid leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

CVE-2025-4899

CVE-2025-4899 affects Campcodes Sales and Inventory System 1.0. The vulnerability lies in the /pages/transaction_update.php file where the ID parameter is manipulated, enabling SQL injection. This can be exploited remotely, and the exploit has been publicly disclosed. Remediation guidance from PT...

CVE-2025-4899 Campcodes Sales and Inventory System transaction_update.php sql injection

A vulnerability was found in Campcodes Sales and Inventory System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /pages/transactionupdate.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit...

CVE-2025-4899 Campcodes Sales and Inventory System transaction_update.php sql injection

A vulnerability was found in Campcodes Sales and Inventory System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /pages/transactionupdate.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit...

CVE-2025-4875

A vulnerability was found in Campcodes Online Shopping Portal 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /forgot-password.php. The manipulation of the argument email leads to sql injection. The attack can be initiated remotely. The exploit has been...

CVE-2025-4875

A vulnerability was found in Campcodes Online Shopping Portal 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /forgot-password.php. The manipulation of the argument email leads to sql injection. The attack can be initiated remotely. The exploit has been...

CVE-2025-4875 Campcodes Online Shopping Portal forgot-password.php sql injection

A vulnerability was found in Campcodes Online Shopping Portal 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /forgot-password.php. The manipulation of the argument email leads to sql injection. The attack can be initiated remotely. The exploit has been...

CVE-2025-4875

CVE-2025-4875 concerns Campcodes Online Shopping Portal 1.0 and a SQL injection in /forgot-password.php triggered by manipulating the email parameter. The issue is exploitable remotely and, per sources, exploitation has been publicized. Connected documents specify the vulnerability context and im...