CVE-2025-11109: Campcodes Computer Sales and Inventory System us_edit.php sql injection
A vulnerability was identified in Campcodes Computer Sales and Inventory System 1.0. The affected element is an unknown function of the file /pages/usedit.php?action=edit. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit is publicly available and might be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-11109?
CVE-2025-11109 is classified as a high severity vulnerability due to its potential for SQL injection attacks.
How do I fix CVE-2025-11109?
To fix CVE-2025-11109, users should sanitize user inputs and implement prepared statements to prevent SQL injection.
What types of attacks can exploit CVE-2025-11109?
CVE-2025-11109 can be exploited to perform remote SQL injection attacks allowing unauthorized access to the database.
Which systems are affected by CVE-2025-11109?
CVE-2025-11109 affects Campcodes Computer Sales and Inventory System version 1.0.
Is there a patch available for CVE-2025-11109?
As of now, there is no official patch available for CVE-2025-11109, so affected users should take immediate remediation actions.