CVE-2025-10435: Campcodes Computer Sales and Inventory System cust_edit1.php sql injection

Published Sep 15, 2025

Updated

A security flaw has been discovered in Campcodes Computer Sales and Inventory System 1.0. The affected element is an unknown function of the file /pages/custedit1.php. The manipulation of the argument ID results in sql injection. The attack may be performed from remote. The exploit has been released to the public and may be exploited.

Affected Software

2 affected components

Campcodes Computer Sales and Inventory System

Campcodes Computer Sales and Inventory System=1.0

Event History

Sep 15, 2025

CVE Published

via MITRE·09:02 AM

Data Sourced

via MITRE·09:02 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·09:15 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-10435?

CVE-2025-10435 has been classified as a high severity vulnerability due to its potential for SQL injection attacks.

How do I fix CVE-2025-10435?

To fix CVE-2025-10435, ensure to validate and escape all user inputs passed to SQL queries in the affected /pages/cust_edit1.php file.

What systems are affected by CVE-2025-10435?

The vulnerability CVE-2025-10435 affects versions of the Campcodes Computer Sales and Inventory System 1.0.

Can CVE-2025-10435 be exploited remotely?

Yes, CVE-2025-10435 can be exploited remotely, allowing attackers to manipulate the ID argument via SQL injection.

What are the potential impacts of CVE-2025-10435?

The potential impacts of CVE-2025-10435 include unauthorized access to database information and possible data manipulation.