CVE-2025-10416

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A vulnerability was identified in Campcodes Grocery Sales and Inventory System 1.0. This impacts an unknown function of the file /ajax.php?action=delete_supplier. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit is publicly available and might be used.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-74 CWE-89

Affected software

Vendor	Product	Versions
Campcodes	Grocery Sales and Inventory System	1.0

References

https://github.com/zzb1388/cve/issues/79Exploit, Issue Tracking, Third Party Advisory
https://vuldb.com/?ctiid.323850Permissions Required, VDB Entry
https://vuldb.com/?id.323850Third Party Advisory, VDB Entry
https://vuldb.com/?submit.646972Third Party Advisory, VDB Entry
https://www.campcodes.com/Product

Timeline

Published: Sep 15, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-104179.8A security flaw has been discovered in Campcodes Grocery Sales and Inventory System 1.0. Affected is an unknown function of the file /ajax.p CVE-2025-104188.8A weakness has been identified in SourceCodester Student Grading System 1.0. Affected by this vulnerability is an unknown functionality of t CVE-2025-104198.8A security vulnerability has been detected in SourceCodester Student Grading System 1.0. Affected by this issue is some unknown functionalit CVE-2025-10427.5An insecure direct object reference vulnerability in GitLab EE affecting all versions from 15.7 prior to 17.6.5, 17.7 prior to 17.7.4, and 1 CVE-2025-104208.8A vulnerability was detected in SourceCodester Student Grading System 1.0. This affects an unknown part of the file /form137.php. Performing CVE-2025-104218.8A flaw has been found in SourceCodester Student Grading System 1.0. This vulnerability affects unknown code of the file /update_account.php.CVE-2025-104224.3A vulnerability has been found in newbee-mall up to 613a662adf1da7623ec34459bc83e3c1b12d8ce7. This issue affects the function paySuccess of CVE-2025-104233.7A vulnerability was found in newbee-mall 1.0. Impacted is the function mallKaptcha of the file /common/mall/kaptcha. The manipulation result CVE-2025-104249.8A vulnerability was determined in 1000projects Online Student Project Report Submission and Evaluation System 1.0. The affected element is a CVE-2025-104259.8A vulnerability was identified in 1000projects Online Student Project Report Submission and Evaluation System 1.0. The impacted element is a CVE-2025-104269.8A security flaw has been discovered in itsourcecode Online Laundry Management System 1.0. This affects an unknown function of the file /logi CVE-2025-104278.8A weakness has been identified in SourceCodester Pet Grooming Management Software 1.0. This impacts an unknown function of the file /admin/o