CVE-2025-7538 Campcodes Sales and Inventory System product_update.php unrestricted upload

A vulnerability classified as critical was found in Campcodes Sales and Inventory System 1.0. This vulnerability affects unknown code of the file /pages/productupdate.php. The manipulation of the argument image leads to unrestricted upload. The attack can be initiated remotely. The exploit has be...

CVE-2025-7538

The CVE-2025-7538 entry describes a critical unrestricted upload vulnerability in Campcodes Sales and Inventory System 1.0. It affects unknown code within the file /pages/product_update.php where manipulating the image argument enables remote exploitation. The exploit has been publicly disclosed,...

CVE-2025-7538 Campcodes Sales and Inventory System product_update.php unrestricted upload

A vulnerability classified as critical was found in Campcodes Sales and Inventory System 1.0. This vulnerability affects unknown code of the file /pages/productupdate.php. The manipulation of the argument image leads to unrestricted upload. The attack can be initiated remotely. The exploit has be...

CVE-2025-7537 Campcodes Sales and Inventory System product_update.php sql injection

A vulnerability classified as critical has been found in Campcodes Sales and Inventory System 1.0. This affects an unknown part of the file /pages/productupdate.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

CVE-2025-7537

CVE-2025-7537 affects Campcodes Sales and Inventory System 1.0. The vulnerability is an SQL injection in the file “/pages/product_update.php” caused by improper handling of the ID parameter, enabling remote exploitation. Public exploit/disclosure is noted. Impact is described as high/critical dep...

CVE-2025-7536

A vulnerability was found in Campcodes Sales and Inventory System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /pages/receiptcredit.php. The manipulation of the argument sid leads to sql injection. The attack may be launched remotely. The...

CVE-2025-7536

A vulnerability was found in Campcodes Sales and Inventory System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /pages/receiptcredit.php. The manipulation of the argument sid leads to sql injection. The attack may be launched remotely. The...

CVE-2025-7535

A vulnerability was found in Campcodes Sales and Inventory System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /pages/reprintcash.php. The manipulation of the argument sid leads to sql injection. The attack can be launched remotely...

CVE-2025-7535

A vulnerability was found in Campcodes Sales and Inventory System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /pages/reprintcash.php. The manipulation of the argument sid leads to sql injection. The attack can be launched remotely...

CVE-2025-7536 Campcodes Sales and Inventory System receipt_credit.php sql injection

A vulnerability was found in Campcodes Sales and Inventory System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /pages/receiptcredit.php. The manipulation of the argument sid leads to sql injection. The attack may be launched remotely. The...

CVE-2025-7536

CVE-2025-7536 affects Campcodes Sales and Inventory System 1.0. Affected component: the file /pages/receipt_credit.php, where manipulating the sid parameter triggers a SQL injection. Exploitation is remote and the exploit has been disclosed publicly. Several sources (NVD, RH, etc.) cite a critica...

CVE-2025-7536 Campcodes Sales and Inventory System receipt_credit.php sql injection

A vulnerability was found in Campcodes Sales and Inventory System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /pages/receiptcredit.php. The manipulation of the argument sid leads to sql injection. The attack may be launched remotely. The...

CVE-2025-7535 Campcodes Sales and Inventory System reprint_cash.php sql injection

A vulnerability was found in Campcodes Sales and Inventory System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /pages/reprintcash.php. The manipulation of the argument sid leads to sql injection. The attack can be launched remotely...

CVE-2025-7535 Campcodes Sales and Inventory System reprint_cash.php sql injection

A vulnerability was found in Campcodes Sales and Inventory System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /pages/reprintcash.php. The manipulation of the argument sid leads to sql injection. The attack can be launched remotely...

CVE-2025-7535

CVE-2025-7535 affects Campcodes Sales and Inventory System 1.0. The vulnerability is in an unknown function of /pages/reprint_cash.php where manipulation of the sid parameter enables SQL injection. Exploitation is possible remotely and public disclosure has occurred. Connected sources confirm the...

CampCodes Sales and Inventory System Injection Vulnerability

CampCodes Sales and Inventory System is a sales and inventory system from CampCodes, Inc. An injection vulnerability exists in version 1.0 of the CampCodes Sales and Inventory System, which stems from SQL injection due to incorrect manipulation of the parameter sid in the file...

CVE-2025-7537: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in Campcodes Sales and Inventory System 1.0. This affects an unknown part of the file /pages/productupdate.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

CVE-2025-7538: Unrestricted Upload of File with Dangerous Type

A vulnerability classified as critical was found in Campcodes Sales and Inventory System 1.0. This vulnerability affects unknown code of the file /pages/productupdate.php. The manipulation of the argument image leads to unrestricted upload. The attack can be initiated remotely. The exploit has be...

PT-2025-29381 · Campcodes · Campcodes Sales/Inventory System

Name of the Vulnerable Software and Affected Versions: Campcodes Sales and Inventory System version 1.0 Description: A critical issue exists in Campcodes Sales and Inventory System. The vulnerability is located in the file /pages/product update.php and allows for SQL injection through manipulatio...

CVE-2025-7535: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Campcodes Sales and Inventory System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /pages/reprintcash.php. The manipulation of the argument sid leads to sql injection. The attack can be launched remotely...