CVE-2025-10808: Campcodes Farm Management System uploadProduct.php sql injection

Published Sep 22, 2025

Updated

A weakness has been identified in Campcodes Farm Management System 1.0. Impacted is an unknown function of the file /uploadProduct.php. This manipulation of the argument Type causes sql injection. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be exploited.

Affected Software

2 affected components

Campcodes Farm Management System

Campcodes Farm Management System=1.0

Event History

Sep 22, 2025

CVE Published

via MITRE·05:32 PM

Data Sourced

via MITRE·05:32 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·06:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-10808?

CVE-2025-10808 has a high severity rating due to its potential for remote exploitation through SQL injection.

How do I fix CVE-2025-10808?

To fix CVE-2025-10808, validate and sanitize user inputs in the /uploadProduct.php file to prevent SQL injection.

What software versions are affected by CVE-2025-10808?

CVE-2025-10808 affects Campcodes Farm Management System version 1.0.

Can CVE-2025-10808 be exploited remotely?

Yes, CVE-2025-10808 can be exploited remotely due to the vulnerability in the application.

What type of vulnerability is CVE-2025-10808?

CVE-2025-10808 is classified as an SQL injection vulnerability.