Description
A flaw has been found in Campcodes Computer Sales and Inventory System 1.0. This issue affects some unknown processing of the file /pages/inv_edit1.php. Executing manipulation of the argument idd can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be used.
Metrics
CVSS 3.1 9.8/10
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| Campcodes | Computer Sales and Inventory System | 1.0 |
References
- https://github.com/Michsta/CVE/issues/2Exploit, Issue Tracking, Third Party Advisory
- https://vuldb.com/?ctiid.325187Permissions Required, VDB Entry
- https://vuldb.com/?id.325187Third Party Advisory, VDB Entry
- https://vuldb.com/?submit.655993Third Party Advisory, VDB Entry
- https://www.campcodes.com/Product
- https://github.com/Michsta/CVE/issues/2Exploit, Issue Tracking, Third Party Advisory
Timeline
- Published
- Sep 23, 2025
- Last modified
- Oct 11, 2026
- NVD status
- Analyzed