CVE 6.9 MEDIUM

Campcodes Sales and Inventory System Setting settings_update.php sql injection_CVE-2025-7933

6.9 / 10
MEDIUM
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

Description

A vulnerability classified as critical was found in Campcodes Sales and Inventory System 1.0. This vulnerability affects unknown code of the file /pages/settings_update.php of the component Setting Handler. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

Basic Information

ID CVE-2025-7933
Source VulDB
Published Jul 21, 2025 at 18:02
Modified Jul 21, 2025 at 18:47

Affected Product

Vendor Campcodes
Product Sales and Inventory System
Version 1.0
Affected Versions Campcodes Sales and Inventory System 1.0

CWE Classification

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.