PT-2025-29317 · Campcodes · Campcodes Sales/Inventory System

Name of the Vulnerable Software and Affected Versions: Campcodes Sales and Inventory System version 1.0 Description: A critical issue exists in Campcodes Sales and Inventory System 1.0 related to the processing of the /pages/product add.php file. Manipulation of the prod name argument can lead to...

CampCodes Sales and Inventory System 代码问题漏洞

CampCodes Sales and Inventory System is a sales and inventory system from CampCodes, Inc. A code issue vulnerability exists in version 1.0 of the CampCodes Sales and Inventory System, which stems from an arbitrary file upload due to incorrect manipulation of the parameter image in the file...

PT-2025-29318 · Campcodes · Campcodes Sales/Inventory System

Name of the Vulnerable Software and Affected Versions: Campcodes Sales and Inventory System version 1.0 Description: A critical issue exists in Campcodes Sales and Inventory System 1.0, allowing for unrestricted file upload. The vulnerability is located in an unknown function within the...

CampCodes Sales and Inventory System 注入漏洞

CampCodes Sales and Inventory System is a sales and inventory system from CampCodes, Inc. An injection vulnerability exists in Campcodes Sales and Inventory System version 1.0, which stems from an incorrect manipulation of the parameter prodname in the file /pages/productadd.php that results in S...

CVE-2025-7183

A vulnerability was found in Campcodes Sales and Inventory System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /pages/customeraccount.php. The manipulation of the argument Customer leads to sql injection. The attack may be launched remotely. The...

Complete Online Learning Management System

Campcodes Complete Sales and Inventory System V1.0 /pages/repr...

Complete Insurance Agency Management System

Campcodes Complete Sales and Inventory System V1.0 /pages/rece...

Advanced Online Voting System

Campcodes Complete Sales and Inventory System V1.0 /pages/prod...

CVE-2025-7183

A vulnerability was found in Campcodes Sales and Inventory System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /pages/customeraccount.php. The manipulation of the argument Customer leads to sql injection. The attack may be launched remotely. The...

CVE-2025-7183

A vulnerability was found in Campcodes Sales and Inventory System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /pages/customeraccount.php. The manipulation of the argument Customer leads to sql injection. The attack may be launched remotely. The...

CVE-2025-7183 Campcodes Sales and Inventory System customer_account.php sql injection

A vulnerability was found in Campcodes Sales and Inventory System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /pages/customeraccount.php. The manipulation of the argument Customer leads to sql injection. The attack may be launched remotely. The...

CVE-2025-7183 Campcodes Sales and Inventory System customer_account.php sql injection

A vulnerability was found in Campcodes Sales and Inventory System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /pages/customeraccount.php. The manipulation of the argument Customer leads to sql injection. The attack may be launched remotely. The...

CampCodes Sales and Inventory System 注入漏洞

CampCodes Sales and Inventory System is a sales and inventory system from CampCodes, Inc. An injection vulnerability exists in Campcodes Sales and Inventory System version 1.0, which stems from improper manipulation of the parameter Customer in the file /pages/customeraccount.php, which could lea...

PT-2025-28481 · Unknown · Campcodes Sales/Inventory System

Name of the Vulnerable Software and Affected Versions: Campcodes Sales and Inventory System version 1.0 Description: A critical issue was found in the system, affecting some unknown functionality of the file "/pages/customer account.php". The manipulation of the Customer argument leads to SQL...

CVE-2025-53108

HomeBox is a home inventory and organization system. Prior to 0.20.1, HomeBox contains a missing authorization check in the API endpoints responsible for updating and deleting inventory item attachments. This flaw allows authenticated users to perform unauthorized actions on inventory item...

Inventory Management System editUser.php File SQL Injection Vulnerability

Inventory Management System is an inventory management system. Inventory Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter edituserName in the file /phpaction/editUser.php. An attacker can...

Inventory Management System createUser.php File SQL Injection Vulnerability

Inventory Management System is an inventory management system. Inventory Management System suffers from a SQL injection vulnerability that originates from the lack of validation of the parameter Username in the file /phpaction/createUser.php for externally entered SQL statements. An attacker can...

Inventory Management System removeUser.php File SQL Injection Vulnerability

Inventory Management System is an inventory management system. Inventory Management System suffers from a SQL injection vulnerability that originates from the lack of validation of the userid parameter in the file /phpaction/removeUser.php for externally entered SQL statements. An attacker can...

CVE-2025-6935

A vulnerability was found in Campcodes Sales and Inventory System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /pages/paymentadd.php. The manipulation of the argument cid leads to sql injection. The attack may be launched remotely. The exploit h...

Missing Authorization

Overview Affected versions of this package are vulnerable to Missing Authorization via the API endpoints responsible for updating and deleting inventory item attachments. An attacker can access or modify attachments belonging to other users by sending crafted requests as an authenticated user...