CVE-2025-10857: Campcodes Point of Sale System POS login.php sql injection
A security flaw has been discovered in Campcodes Point of Sale System POS 1.0. Affected by this issue is some unknown functionality of the file /login.php. Performing manipulation of the argument Username results in sql injection. The attack is possible to be carried out remotely. The exploit has been released to the public and may be exploited.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-10857?
CVE-2025-10857 is classified as a high severity vulnerability due to the potential for remote SQL injection attacks.
How do I fix CVE-2025-10857?
To fix CVE-2025-10857, sanitize and validate all user inputs, especially in the '/login.php' file, and use prepared statements for database queries.
What software is affected by CVE-2025-10857?
CVE-2025-10857 affects Campcodes Point of Sale System POS version 1.0.
Can CVE-2025-10857 be exploited remotely?
Yes, CVE-2025-10857 can be exploited remotely, allowing attackers to perform SQL injection attacks.
What kind of attack is associated with CVE-2025-10857?
CVE-2025-10857 is associated with SQL injection attacks that occur due to vulnerabilities in the login functionality.