CVE-2025-10446: Campcodes Computer Sales and Inventory System cust_searchfrm.php sql injection
A security vulnerability has been detected in Campcodes Computer Sales and Inventory System 1.0. The affected element is an unknown function of the file /pages/custsearchfrm.php?action=edit. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-10446?
CVE-2025-10446 is categorized as a high severity vulnerability due to the presence of SQL injection risks.
How do I fix CVE-2025-10446?
To fix CVE-2025-10446, ensure proper input validation and use prepared statements to mitigate SQL injection.
What type of vulnerability is CVE-2025-10446?
CVE-2025-10446 is an SQL injection vulnerability affecting Campcodes Computer Sales and Inventory System.
Which software is affected by CVE-2025-10446?
CVE-2025-10446 affects Campcodes Computer Sales and Inventory System version 1.0.
What impact does CVE-2025-10446 have on security?
CVE-2025-10446 can allow attackers to manipulate database queries, potentially leading to unauthorized data access.