CVE 6.9 MEDIUM

Campcodes Supplier Management System add_category.php sql injection_CVE-2025-14952

6.9 / 10
MEDIUM
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

Description

A vulnerability was detected in Campcodes Supplier Management System 1.0. This affects an unknown function of the file /admin/add_category.php. Performing manipulation of the argument txtCategoryName results in sql injection. The attack is possible to be carried out remotely. The exploit is now public and may be used.

Basic Information

ID CVE-2025-14952
Source VulDB
Published Dec 19, 2025 at 14:32
Modified Dec 19, 2025 at 15:06

Affected Product

Vendor Campcodes
Product Supplier Management System
Version 1.0
Affected Versions Campcodes Supplier Management System 1.0

CWE Classification

References

πŸ’­ Join the Security Discussion

πŸ”’ Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.