Lucene search
+L

3 matches found

Cvelist
Cvelist
•added 2025/05/18 10:31 p.m.•42 views

CVE-2025-4899 Campcodes Sales and Inventory System transaction_update.php sql injection

A vulnerability was found in Campcodes Sales and Inventory System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /pages/transactionupdate.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit...

7.5CVSS0.00544EPSS
SaveExploits1References5
CVE
CVE
•added 2025/05/18 10:31 p.m.•60 views

CVE-2025-4899

CVE-2025-4899 affects Campcodes Sales and Inventory System 1.0. The vulnerability lies in the /pages/transaction_update.php file where the ID parameter is manipulated, enabling SQL injection. This can be exploited remotely, and the exploit has been publicly disclosed. Remediation guidance from PT...

9.8CVSS7.5AI score0.00544EPSS
SaveExploits1References5Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/18 12:00 a.m.•5 views

CVE-2025-4899: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Campcodes Sales and Inventory System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /pages/transactionupdate.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit...

9.8CVSS7AI score0.00544EPSS
SaveExploits1References1
Rows per page
Query Builder