CVE-2025-10829: Campcodes Computer Sales and Inventory System sup_edit1.php sql injection

Published Sep 23, 2025

Updated

A vulnerability was detected in Campcodes Computer Sales and Inventory System 1.0. This vulnerability affects unknown code of the file /pages/supedit1.php. Performing manipulation of the argument ID results in sql injection. Remote exploitation of the attack is possible. The exploit is now public and may be used.

Affected Software

2 affected components

Campcodes Computer Sales and Inventory System

Campcodes Computer Sales and Inventory System=1.0

Event History

Sep 23, 2025

CVE Published

via MITRE·01:02 AM

Data Sourced

via MITRE·01:02 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·02:15 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-10829?

CVE-2025-10829 is classified as a high-severity vulnerability due to its potential for remote SQL injection exploitation.

How do I fix CVE-2025-10829?

To fix CVE-2025-10829, sanitize and validate the input parameters, particularly the argument ID, to prevent SQL injection.

What software is affected by CVE-2025-10829?

CVE-2025-10829 affects version 1.0 of the Campcodes Computer Sales and Inventory System.

Can CVE-2025-10829 be exploited remotely?

Yes, CVE-2025-10829 allows for remote exploitation, making it a significant security risk.

What type of vulnerability is CVE-2025-10829?

CVE-2025-10829 is a SQL injection vulnerability that arises from improper handling of user inputs.