CVE-2025-4746

CVE-2025-4746 affects Campcodes Sales and Inventory System v1.0. The vulnerability is in /pages/purchase_delete.php where unsafely using the pr_id parameter enables remote SQL injection, potentially exposing database data. Public exploitation is noted in some sources. No patch/version fix is desc...

CVE-2025-4746: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in Campcodes Sales and Inventory System 1.0 and classified as critical. This vulnerability affects unknown code of the file /pages/purchasedelete.php. The manipulation of the argument prid leads to sql injection. The attack can be initiated remotely. The exploit has...