CVE-2025-10445: Campcodes Computer Sales and Inventory System us_transac.php sql injection
A weakness has been identified in Campcodes Computer Sales and Inventory System 1.0. Impacted is an unknown function of the file /pages/ustransac.php?action=add. Executing manipulation of the argument Username can lead to sql injection. The attack may be performed from remote. The exploit has been made available to the public and could be exploited.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-10445?
CVE-2025-10445 is considered a high-severity vulnerability due to its potential for SQL injection attacks.
How do I fix CVE-2025-10445?
To address CVE-2025-10445, it is recommended to sanitize and validate input data for the Username argument to prevent SQL injection.
What systems are affected by CVE-2025-10445?
CVE-2025-10445 specifically affects Campcodes Computer Sales and Inventory System version 1.0.
Can CVE-2025-10445 be exploited remotely?
Yes, CVE-2025-10445 can be exploited remotely, allowing attackers to manipulate the Username argument to carry out SQL injection.
What is SQL injection in the context of CVE-2025-10445?
In the context of CVE-2025-10445, SQL injection is a technique where an attacker can execute arbitrary SQL queries against the database by manipulating input parameters.