CampCodes Online Food Ordering System 注入漏洞

CampCodes Online Food Ordering System is an online food ordering system from CampCodes, Inc. An injection vulnerability exists in version 1.0 of the CampCodes Online Food Ordering System, which originates from a SQL injection due to incorrect manipulation of the parameter price in the file...

CVE-2025-4506: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Campcodes Online Food Ordering System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /routers/menu-router.php. The manipulation of the argument 1price leads to sql injection. The attack may be launched remotely. Th...

CVE-2025-4507: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in Campcodes Online Food Ordering System 1.0. This affects an unknown part of the file /routers/add-item.php. The manipulation of the argument price leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

CVE-2025-4492

A vulnerability, which was classified as critical, has been found in Campcodes Online Food Ordering System 1.0. This issue affects some unknown processing of the file /routers/ticket-message.php. The manipulation of the argument ticketid leads to sql injection. The attack may be initiated remotel...

CVE-2025-4492

A vulnerability, which was classified as critical, has been found in Campcodes Online Food Ordering System 1.0. This issue affects some unknown processing of the file /routers/ticket-message.php. The manipulation of the argument ticketid leads to sql injection. The attack may be initiated remotel...

CVE-2025-4492

CVE-2025-4492 concerns Campcodes Online Food Ordering System 1.0, where manipulation of the argument in /routers/ticket-message.php leads to a SQL injection. The vulnerability (remote- exploitable) arises from improper handling of the ticket_id parameter, with multiple connected sources confirmin...

CVE-2025-4492 Campcodes Online Food Ordering System ticket-message.php sql injection

A vulnerability, which was classified as critical, has been found in Campcodes Online Food Ordering System 1.0. This issue affects some unknown processing of the file /routers/ticket-message.php. The manipulation of the argument ticketid leads to sql injection. The attack may be initiated remotel...

CVE-2025-4492 Campcodes Online Food Ordering System ticket-message.php sql injection

A vulnerability, which was classified as critical, has been found in Campcodes Online Food Ordering System 1.0. This issue affects some unknown processing of the file /routers/ticket-message.php. The manipulation of the argument ticketid leads to sql injection. The attack may be initiated remotel...

CVE-2025-4489

A vulnerability was found in Campcodes Online Food Ordering System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /routers/user-router.php. The manipulation of the argument t1verified leads to sql injection. The attack may be launched remotely...

CVE-2025-4491

A vulnerability classified as critical was found in Campcodes Online Food Ordering System 1.0. This vulnerability affects unknown code of the file /routers/ticket-status.php. The manipulation of the argument ticketid leads to sql injection. The attack can be initiated remotely. The exploit has be...

CVE-2025-4491

A vulnerability classified as critical was found in Campcodes Online Food Ordering System 1.0. This vulnerability affects unknown code of the file /routers/ticket-status.php. The manipulation of the argument ticketid leads to sql injection. The attack can be initiated remotely. The exploit has be...

CVE-2025-4489

A vulnerability was found in Campcodes Online Food Ordering System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /routers/user-router.php. The manipulation of the argument t1verified leads to sql injection. The attack may be launched remotely...

CVE-2025-4490

A vulnerability classified as critical has been found in Campcodes Online Food Ordering System 1.0. This affects an unknown part of the file /view-ticket-admin.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

CVE-2025-4491 Campcodes Online Food Ordering System ticket-status.php sql injection

A vulnerability classified as critical was found in Campcodes Online Food Ordering System 1.0. This vulnerability affects unknown code of the file /routers/ticket-status.php. The manipulation of the argument ticketid leads to sql injection. The attack can be initiated remotely. The exploit has be...

CVE-2025-4491

The CVE-2025-4491 entry concerns Campcodes Online Food Ordering System 1.0. Affected component: /routers/ticket-status.php. Root cause: manipulation of the ticket_id input enables SQL injection in the backend. Impact: high potential for unauthorized data access or modification; exploitation is re...

CVE-2025-4490 Campcodes Online Food Ordering System view-ticket-admin.php sql injection

A vulnerability classified as critical has been found in Campcodes Online Food Ordering System 1.0. This affects an unknown part of the file /view-ticket-admin.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

CVE-2025-4490 Campcodes Online Food Ordering System view-ticket-admin.php sql injection

A vulnerability classified as critical has been found in Campcodes Online Food Ordering System 1.0. This affects an unknown part of the file /view-ticket-admin.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

CVE-2025-4490

Campcodes Online Food Ordering System 1.0 has a SQL injection vulnerability in /view-ticket-admin.php triggered by manipulating the ID parameter. Exploitation can be remote and does not require authentication. Several sources indicate no patch is publicly available yet; mitigations include avoidi...

CVE-2025-4489 Campcodes Online Food Ordering System user-router.php sql injection

A vulnerability was found in Campcodes Online Food Ordering System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /routers/user-router.php. The manipulation of the argument t1verified leads to sql injection. The attack may be launched remotely...

CVE-2025-4489

CVE-2025-4489 affects Campcodes Online Food Ordering System 1.0. A vulnerability exists in the file /routers/user-router.php where manipulation of the t1_verified argument enables SQL injection. The issue is exploitable remotely and, per sources, the exploit has been disclosed publicly. Multiple ...