CVE-2025-7538

The CVE-2025-7538 entry describes a critical unrestricted upload vulnerability in Campcodes Sales and Inventory System 1.0. It affects unknown code within the file /pages/product_update.php where manipulating the image argument enables remote exploitation. The exploit has been publicly disclosed,...

CVE-2025-7537 Campcodes Sales and Inventory System product_update.php sql injection

A vulnerability classified as critical has been found in Campcodes Sales and Inventory System 1.0. This affects an unknown part of the file /pages/productupdate.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

CVE-2025-4886 itsourcecode Sales and Inventory System product_update.php sql injection

A vulnerability classified as critical was found in itsourcecode Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/productupdate.php. The manipulation of the argument serial leads to sql injection. The attack can be launched remotely. Th...

CVE-2025-4886 itsourcecode Sales and Inventory System product_update.php sql injection

A vulnerability classified as critical was found in itsourcecode Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/productupdate.php. The manipulation of the argument serial leads to sql injection. The attack can be launched remotely. Th...