CVE-2025-4718

CVE-2025-4718 affects Campcodes Sales and Inventory System v1.0. A vulnerability in /pages/customer_add.php allows manipulation of the last parameter to perform SQL injection, with remote exploitation and public disclosure. Multiple sources corroborate the issue across NVD/Red Hat/CVE list entrie...

CVE-2025-4718: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in Campcodes Sales and Inventory System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /pages/customeradd.php. The manipulation of the argument last leads to sql injection. The attack can be launched remotely...