CVE-2025-11039: Campcodes Computer Sales and Inventory System us_edit1.php sql injection

Published Sep 26, 2025

Updated

A security vulnerability has been detected in Campcodes Computer Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/usedit1.php. The manipulation of the argument ID leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used.

Affected Software

2 affected components

Campcodes Computer Sales and Inventory System

Campcodes Computer Sales and Inventory System=1.0

Event History

Sep 26, 2025

CVE Published

via MITRE·07:32 PM

Data Sourced

via MITRE·07:32 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·08:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-11039?

The severity of CVE-2025-11039 is high due to the potential for remote SQL injection.

How do I fix CVE-2025-11039?

To fix CVE-2025-11039, validate and sanitize all user inputs, especially the ID parameter in /pages/us_edit1.php.

What type of attack does CVE-2025-11039 allow?

CVE-2025-11039 allows for SQL injection attacks that could compromise the database.

Is CVE-2025-11039 exploitable remotely?

Yes, CVE-2025-11039 can be exploited remotely, making it particularly dangerous.

Which version of the software is affected by CVE-2025-11039?

CVE-2025-11039 affects Campcodes Computer Sales and Inventory System version 1.0.