CVE-2025-10831: Campcodes Computer Sales and Inventory System pro_edit1.php sql injection

Published Sep 23, 2025

Updated

A vulnerability has been found in Campcodes Computer Sales and Inventory System 1.0. Impacted is an unknown function of the file /pages/proedit1.php. The manipulation of the argument prodcode leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used.

Affected Software

2 affected components

Campcodes Computer Sales and Inventory System

Campcodes Computer Sales and Inventory System=1.0

Event History

Sep 23, 2025

CVE Published

via MITRE·01:32 AM

Data Sourced

via MITRE·01:32 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·02:15 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-10831?

CVE-2025-10831 is classified as a critical vulnerability due to its potential for SQL injection and remote exploitation.

How do I fix CVE-2025-10831?

To mitigate CVE-2025-10831, validate and sanitize user inputs for the prodcode argument in the /pages/pro_edit1.php file.

Can CVE-2025-10831 be exploited remotely?

Yes, CVE-2025-10831 can be exploited remotely due to its nature of SQL injection vulnerabilities.

What software is affected by CVE-2025-10831?

CVE-2025-10831 affects the Campcodes Computer Sales and Inventory System version 1.0.

What kind of attack does CVE-2025-10831 involve?

CVE-2025-10831 involves an SQL injection attack that can manipulate the database through improper handling of the prodcode argument.