Lucene search
K

11 matches found

RedhatCVE
RedhatCVE
added 2025/11/18 6:2 p.m.3 views

CVE-2025-13291

A vulnerability was found in Campcodes Supplier Management System 1.0. This affects an unknown part of the file /manufacturer/confirmorder.php. Performing a manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The exploit has been made public and could b...

9.8CVSS7.2AI score0.00339EPSS
Exploits1References1
NVD
NVD
added 2025/11/17 5:15 p.m.4 views

CVE-2025-13291

A vulnerability was found in Campcodes Supplier Management System 1.0. This affects an unknown part of the file /manufacturer/confirmorder.php. Performing a manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The exploit has been made public and could b...

9.8CVSS0.00339EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2025/11/17 5:2 p.m.2 views

CVE-2025-13291 Campcodes Supplier Management System confirm_order.php sql injection

A vulnerability was found in Campcodes Supplier Management System 1.0. This affects an unknown part of the file /manufacturer/confirmorder.php. Performing a manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The exploit has been made public and could b...

7.5CVSS7.2AI score0.00339EPSS
Exploits1References5
Cvelist
Cvelist
added 2025/11/17 5:2 p.m.9 views

CVE-2025-13291 Campcodes Supplier Management System confirm_order.php sql injection

A vulnerability was found in Campcodes Supplier Management System 1.0. This affects an unknown part of the file /manufacturer/confirmorder.php. Performing a manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The exploit has been made public and could b...

7.5CVSS0.00339EPSS
Exploits1References5
EUVD
EUVD
added 2025/11/17 5:2 p.m.4 views

EUVD-2025-197855

A vulnerability was found in Campcodes Supplier Management System 1.0. This affects an unknown part of the file /manufacturer/confirmorder.php. Performing manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The exploit has been made public and could be...

7.5CVSS7.2AI score0.00339EPSS
Exploits1References6
CVE
CVE
added 2025/11/17 5:2 p.m.10 views

CVE-2025-13291

CVE-2025-13291 affects Campcodes Supplier Management System 1.0. The SQL injection vulnerability resides in the /manufacturer/confirm_order.php file, triggered by manipulating the ID parameter. It is remotely exploitable and the exploit has been made public. Impact is described with high confiden...

9.8CVSS7.2AI score0.00339EPSS
Exploits1References5Affected Software1
Positive Technologies
Positive Technologies
added 2025/11/17 12:0 a.m.4 views

PT-2025-47173

Name of the Vulnerable Software and Affected Versions Campcodes Supplier Management System version 1.0 Description A flaw exists in Campcodes Supplier Management System that allows for SQL injection. This issue affects the /manufacturer/confirm order.php file. Manipulation of the ID argument can...

7.5CVSS6.9AI score0.00339EPSS
Exploits1References7
CNNVD
CNNVD
added 2025/11/17 12:0 a.m.2 views

CampCodes Supplier Management System SQL注入漏洞

CampCodes Supplier Management System is a supplier management system from CampCodes, Inc. A SQL injection vulnerability exists in Campcodes Supplier Management System version 1.0, which stems from incorrect manipulation of the parameter ID in the file /manufacturer/confirmorder.php, which could...

9.8CVSS7.8AI score0.00339EPSS
Exploits1References6
Vulnrichment
Vulnrichment
added 2025/09/10 9:2 p.m.2 views

CVE-2025-10216 GrandNode Voucher ConfirmOrder race condition

A vulnerability was detected in GrandNode up to 2.3.0. The impacted element is an unknown function of the file /checkout/ConfirmOrder/ of the component Voucher Handler. The manipulation of the argument giftvouchercouponcode results in race condition. The attack may be launched remotely. The attac...

2.6CVSS6.2AI score0.00167EPSS
Exploits0References3
CNNVD
CNNVD
added 2025/09/10 12:0 a.m.2 views

GrandNode 竞争条件问题漏洞

GrandNode is a GrandNode open source, cross-platform, open source e-commerce solution based on ASP.NET CORE and MongoDB. A Competitive Condition Issue vulnerability exists in GrandNode 2.3.0 and earlier versions, which stems from a competitive condition due to incorrect manipulation of the...

2.6CVSS4.1AI score0.00167EPSS
Exploits0References3
OSV
OSV
added 2023/10/05 6:15 p.m.3 views

CVE-2023-5423

A vulnerability has been found in SourceCodester Online Pizza Ordering System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/ajax.php?action=confirmorder. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely...

9.8CVSS5.8AI score0.00409EPSS
Exploits0References2
Rows per page
Query Builder