Description
A vulnerability classified as critical has been found in Campcodes Sales and Inventory System 1.0. This affects an unknown part of the file /pages/product_update.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Metrics
CVSS 3.1 9.8/10
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| Campcodes | Sales and Inventory System | 1.0 |
References
- https://github.com/zhaodaojie/cve/issues/2Exploit, Issue Tracking, Third Party Advisory
- https://vuldb.com/?ctiid.316233Permissions Required
- https://vuldb.com/?id.316233Third Party Advisory, VDB Entry
- https://vuldb.com/?submit.613624Third Party Advisory, VDB Entry
- https://www.campcodes.com/Product
- https://github.com/zhaodaojie/cve/issues/2Exploit, Issue Tracking, Third Party Advisory
Timeline
- Published
- Jul 13, 2025
- Last modified
- Jun 17, 2026
- NVD status
- Analyzed