Lucene search
+L

4767 matches found

Cvelist
Cvelist
added 2025/09/28 3:32 p.m.23 views

CVE-2025-11109 Campcodes Computer Sales and Inventory System us_edit.php sql injection

A vulnerability was identified in Campcodes Computer Sales and Inventory System 1.0. The affected element is an unknown function of the file /pages/usedit.php?action=edit. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit is...

7.5CVSS0.00456EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/09/28 12:00 a.m.6 views

CampCodes Computer Sales and Inventory System SQL注入漏洞

CampCodes Computer Sales and Inventory System is a computerized sales and inventory system from CampCodes Philippines. CampCodes Computer Sales and Inventory System version 1.0 suffers from a SQL injection vulnerability that stems from incorrect manipulation of the parameter ID in the file...

9.8CVSS7.8AI score0.00456EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2025/09/28 12:00 a.m.7 views

PT-2025-39777

Name of the Vulnerable Software and Affected Versions Campcodes Computer Sales and Inventory System version 1.0 Description A flaw exists in Campcodes Computer Sales and Inventory System version 1.0 that allows for remote SQL injection. The issue is located in the file /pages/us edit.php and...

9.8CVSS7.4AI score0.00456EPSS
SaveExploits1References11
RedhatCVE
RedhatCVE
added 2025/09/27 7:33 p.m.20 views

CVE-2025-11039

A security vulnerability has been detected in Campcodes Computer Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/usedit1.php. The manipulation of the argument ID leads to sql injection. Remote exploitation of the attack is possible. Th...

7.5CVSS6.9AI score0.00405EPSS
SaveExploits1References1
NVD
NVD
added 2025/09/26 8:15 p.m.16 views

CVE-2025-11039

A security vulnerability has been detected in Campcodes Computer Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/usedit1.php. The manipulation of the argument ID leads to sql injection. Remote exploitation of the attack is possible. Th...

9.8CVSS0.00405EPSS
SaveExploits1References5
CVE
CVE
added 2025/09/26 7:32 p.m.25 views

CVE-2025-11039

The CVE-2025-11039 affects Campcodes Computer Sales and Inventory System v1.0. The vulnerability comes from improper handling of the ID parameter in the file /pages/us_edit1.php, enabling SQL injection via that argument. Remote exploitation is possible and exploits have been publicly disclosed. M...

9.8CVSS7.2AI score0.00405EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
added 2025/09/26 7:32 p.m.19 views

CVE-2025-11039 Campcodes Computer Sales and Inventory System us_edit1.php sql injection

A security vulnerability has been detected in Campcodes Computer Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/usedit1.php. The manipulation of the argument ID leads to sql injection. Remote exploitation of the attack is possible. Th...

7.5CVSS0.00405EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/09/26 12:00 a.m.10 views

CampCodes Computer Sales and Inventory System SQL注入漏洞

CampCodes Computer Sales and Inventory System is a computerized sales and inventory system from CampCodes Philippines. CampCodes Computer Sales and Inventory System version 1.0 suffers from a SQL injection vulnerability that stems from incorrect manipulation of the parameter ID in the file...

9.8CVSS7.7AI score0.00405EPSS
SaveExploits1References6
RedhatCVE
RedhatCVE
added 2025/09/25 11:47 a.m.18 views

CVE-2025-9054

The MultiLoca - WooCommerce Multi Locations Inventory Management plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the 'wcmlimsettingsajaxhandler' function in all versions up to, and including, 4.2.8...

9.8CVSS6.1AI score0.00349EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/09/25 2:54 a.m.20 views

CVE-2025-10830

A flaw has been found in Campcodes Computer Sales and Inventory System 1.0. This issue affects some unknown processing of the file /pages/invedit1.php. Executing manipulation of the argument idd can lead to sql injection. The attack can be executed remotely. The exploit has been published and may...

9.8CVSS7.2AI score0.00387EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/09/25 2:54 a.m.6 views

CVE-2025-10829

A vulnerability was detected in Campcodes Computer Sales and Inventory System 1.0. This vulnerability affects unknown code of the file /pages/supedit1.php. Performing manipulation of the argument ID results in sql injection. Remote exploitation of the attack is possible. The exploit is now public...

9.8CVSS7.3AI score0.00387EPSS
SaveExploits1References1
NVD
NVD
added 2025/09/24 12:15 p.m.11 views

CVE-2025-9054

The MultiLoca - WooCommerce Multi Locations Inventory Management plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the 'wcmlimsettingsajaxhandler' function in all versions up to, and including, 4.2.8...

9.8CVSS0.00349EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/09/24 6:34 a.m.21 views

CVE-2025-10785

A vulnerability was detected in Campcodes Grocery Sales and Inventory System 1.0. This affects an unknown part of the file /manageuser.php. The manipulation of the argument ID results in sql injection. It is possible to launch the attack remotely. The exploit is now public and may be used...

9.8CVSS7AI score0.00521EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/09/24 6:34 a.m.20 views

CVE-2025-10786

A flaw has been found in Campcodes Grocery Sales and Inventory System 1.0. This vulnerability affects unknown code of the file /ajax.php?action=deleteuser. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been published and may be us...

9.8CVSS7AI score0.00521EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2025/09/24 12:00 a.m.8 views

WordPress plugin MultiLoca - WooCommerce Multi Locations Inventory Management 安全漏洞

WordPress and the WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress is a blogging platform developed using the PHP language, which provides the ability to host personal blog sites on PHP and MySQL based...

9.8CVSS6.1AI score0.00349EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/09/24 12:00 a.m.12 views

PT-2025-39243

Name of the Vulnerable Software and Affected Versions MultiLoca - WooCommerce Multi Locations Inventory Management plugin for WordPress versions prior to 4.2.9 Description The software is susceptible to unauthorized data modification, potentially allowing attackers to escalate privileges...

9.8CVSS6.8AI score0.00349EPSS
SaveExploits0References9
OSV
OSV
added 2025/09/23 2:15 a.m.10 views

CVE-2025-10829

A vulnerability was detected in Campcodes Computer Sales and Inventory System 1.0. This vulnerability affects unknown code of the file /pages/supedit1.php. Performing manipulation of the argument ID results in sql injection. Remote exploitation of the attack is possible. The exploit is now public...

9.8CVSS5.8AI score0.00387EPSS
SaveExploits1References5
NVD
NVD
added 2025/09/23 2:15 a.m.26 views

CVE-2025-10831

A vulnerability has been found in Campcodes Computer Sales and Inventory System 1.0. Impacted is an unknown function of the file /pages/proedit1.php. The manipulation of the argument prodcode leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed...

9.8CVSS0.00387EPSS
SaveExploits1References5
OSV
OSV
added 2025/09/23 2:15 a.m.7 views

CVE-2025-10830

A flaw has been found in Campcodes Computer Sales and Inventory System 1.0. This issue affects some unknown processing of the file /pages/invedit1.php. Executing manipulation of the argument idd can lead to sql injection. The attack can be executed remotely. The exploit has been published and may...

9.8CVSS5.8AI score0.00387EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2025/09/23 1:32 a.m.25 views

CVE-2025-10831 Campcodes Computer Sales and Inventory System pro_edit1.php sql injection

A vulnerability has been found in Campcodes Computer Sales and Inventory System 1.0. Impacted is an unknown function of the file /pages/proedit1.php. The manipulation of the argument prodcode leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed...

7.5CVSS0.00387EPSS
SaveExploits1References5
Rows per page
Query Builder