CampCodes Computer Sales and Inventory System SQL注入漏洞

CampCodes Computer Sales and Inventory System is a computerized sales and inventory system from CampCodes Philippines. CampCodes Computer Sales and Inventory System version 1.0 suffers from a SQL injection vulnerability that stems from incorrect manipulation of the parameter ID in the file...

CVE-2025-11109: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was identified in Campcodes Computer Sales and Inventory System 1.0. The affected element is an unknown function of the file /pages/usedit.php?action=edit. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit is...

PT-2025-39777

Name of the Vulnerable Software and Affected Versions Campcodes Computer Sales and Inventory System version 1.0 Description A flaw exists in Campcodes Computer Sales and Inventory System version 1.0 that allows for remote SQL injection. The issue is located in the file /pages/us edit.php and...

CVE-2025-11039

A security vulnerability has been detected in Campcodes Computer Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/usedit1.php. The manipulation of the argument ID leads to sql injection. Remote exploitation of the attack is possible. Th...

CVE-2025-11039

A security vulnerability has been detected in Campcodes Computer Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/usedit1.php. The manipulation of the argument ID leads to sql injection. Remote exploitation of the attack is possible. Th...

CVE-2025-11039

The CVE-2025-11039 affects Campcodes Computer Sales and Inventory System v1.0. The vulnerability comes from improper handling of the ID parameter in the file /pages/us_edit1.php, enabling SQL injection via that argument. Remote exploitation is possible and exploits have been publicly disclosed. M...

CVE-2025-11039 Campcodes Computer Sales and Inventory System us_edit1.php sql injection

A security vulnerability has been detected in Campcodes Computer Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/usedit1.php. The manipulation of the argument ID leads to sql injection. Remote exploitation of the attack is possible. Th...

CVE-2025-11039: Improper Neutralization of Special Elements used in an SQL Command

A security vulnerability has been detected in Campcodes Computer Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/usedit1.php. The manipulation of the argument ID leads to sql injection. Remote exploitation of the attack is possible. Th...

CampCodes Computer Sales and Inventory System SQL注入漏洞

CampCodes Computer Sales and Inventory System is a computerized sales and inventory system from CampCodes Philippines. CampCodes Computer Sales and Inventory System version 1.0 suffers from a SQL injection vulnerability that stems from incorrect manipulation of the parameter ID in the file...

CVE-2025-9054

The MultiLoca - WooCommerce Multi Locations Inventory Management plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the 'wcmlimsettingsajaxhandler' function in all versions up to, and including, 4.2.8...

CVE-2025-10830

A flaw has been found in Campcodes Computer Sales and Inventory System 1.0. This issue affects some unknown processing of the file /pages/invedit1.php. Executing manipulation of the argument idd can lead to sql injection. The attack can be executed remotely. The exploit has been published and may...

CVE-2025-10829

A vulnerability was detected in Campcodes Computer Sales and Inventory System 1.0. This vulnerability affects unknown code of the file /pages/supedit1.php. Performing manipulation of the argument ID results in sql injection. Remote exploitation of the attack is possible. The exploit is now public...

Grocery Sales and Inventory System SQL Injection Vulnerability (CNVD-2026-38223)

Grocery Sales and Inventory System is a software solution for grocery sales and inventory management. This system has a SQL injection vulnerability, which stems from the lack of validation for external SQL statements when processing parameter IDs in the file/manageuser.php. Attackers can exploit...

SQL Injection Vulnerability in Grocery Sales and Inventory System

Grocery Sales and Inventory System is a software solution for grocery sales and inventory management. This system has a SQL injection vulnerability, which stems from the lack of validation for external SQL statements when processing parameter IDs in the file/ajax.php. Attackers can exploit this...

SQL Injection Vulnerability in Computer Sales and Inventory System (CNVD-2026-38219)

Computer Sales and Inventory System is an open-source inventory system for computer sales developed by CampCodes Corporation. The Computer Sales and Inventory System has a SQL injection vulnerability, which stems from the lack of validation for external SQL statements in the parameters of the...

SQL Injection Vulnerability in Computer Sales and Inventory System (CNVD-2026-38220)

Computer Sales and Inventory System is an open-source inventory system for computer sales developed by CampCodes Corporation. The Computer Sales and Inventory System has a SQL injection vulnerability, which stems from the lack of validation for external SQL statements in the parameter idd found i...

CVE-2025-9054

The MultiLoca - WooCommerce Multi Locations Inventory Management plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the 'wcmlimsettingsajaxhandler' function in all versions up to, and including, 4.2.8...

CVE-2025-10785

A vulnerability was detected in Campcodes Grocery Sales and Inventory System 1.0. This affects an unknown part of the file /manageuser.php. The manipulation of the argument ID results in sql injection. It is possible to launch the attack remotely. The exploit is now public and may be used...

CVE-2025-10786

A flaw has been found in Campcodes Grocery Sales and Inventory System 1.0. This vulnerability affects unknown code of the file /ajax.php?action=deleteuser. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been published and may be us...

PT-2025-39243

Name of the Vulnerable Software and Affected Versions MultiLoca - WooCommerce Multi Locations Inventory Management plugin for WordPress versions prior to 4.2.9 Description The software is susceptible to unauthorized data modification, potentially allowing attackers to escalate privileges...