CVE-2025-10785: Campcodes Grocery Sales and Inventory System manage_user.php sql injection
A vulnerability was detected in Campcodes Grocery Sales and Inventory System 1.0. This affects an unknown part of the file /manageuser.php. The manipulation of the argument ID results in sql injection. It is possible to launch the attack remotely. The exploit is now public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-10785?
CVE-2025-10785 is classified as a critical vulnerability due to its potential for remote exploitation via SQL injection.
How do I fix CVE-2025-10785?
To fix CVE-2025-10785, you should sanitize and validate all user inputs in the /manage_user.php file to prevent SQL injection.
What are the potential impacts of CVE-2025-10785?
The potential impacts of CVE-2025-10785 include unauthorized data access, data manipulation, and possible full system compromise.
Who is affected by CVE-2025-10785?
CVE-2025-10785 affects users of Campcodes Grocery Sales and Inventory System version 1.0 due to its vulnerability in the system's file handling.
Is CVE-2025-10785 being actively exploited?
Yes, CVE-2025-10785 is a known vulnerability with public exploits, making it a target for attackers.