CVE-2025-10417

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A security flaw has been discovered in Campcodes Grocery Sales and Inventory System 1.0. Affected is an unknown function of the file /ajax.php?action=delete_product. The manipulation of the argument ID results in sql injection. It is possible to launch the attack remotely. The exploit has been released to the public and may be exploited.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-74 CWE-89

Affected software

No affected versions have been published.

Timeline

Published: Sep 15, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-104188.8A weakness has been identified in SourceCodester Student Grading System 1.0. Affected by this vulnerability is an unknown functionality of t CVE-2025-104198.8A security vulnerability has been detected in SourceCodester Student Grading System 1.0. Affected by this issue is some unknown functionalit CVE-2025-10427.5An insecure direct object reference vulnerability in GitLab EE affecting all versions from 15.7 prior to 17.6.5, 17.7 prior to 17.7.4, and 1 CVE-2025-104208.8A vulnerability was detected in SourceCodester Student Grading System 1.0. This affects an unknown part of the file /form137.php. Performing CVE-2025-104218.8A flaw has been found in SourceCodester Student Grading System 1.0. This vulnerability affects unknown code of the file /update_account.php.CVE-2025-104224.3A vulnerability has been found in newbee-mall up to 613a662adf1da7623ec34459bc83e3c1b12d8ce7. This issue affects the function paySuccess of CVE-2025-104233.7A vulnerability was found in newbee-mall 1.0. Impacted is the function mallKaptcha of the file /common/mall/kaptcha. The manipulation result CVE-2025-104249.8A vulnerability was determined in 1000projects Online Student Project Report Submission and Evaluation System 1.0. The affected element is a CVE-2025-104259.8A vulnerability was identified in 1000projects Online Student Project Report Submission and Evaluation System 1.0. The impacted element is a CVE-2025-104269.8A security flaw has been discovered in itsourcecode Online Laundry Management System 1.0. This affects an unknown function of the file /logi CVE-2025-104278.8A weakness has been identified in SourceCodester Pet Grooming Management Software 1.0. This impacts an unknown function of the file /admin/o CVE-2025-104288.8A security vulnerability has been detected in SourceCodester Pet Grooming Management Software 1.0. Affected is an unknown function of the fi