CVE-2025-13259: Campcodes Supplier Management System edit_unit.php sql injection
A flaw has been found in Campcodes Supplier Management System 1.0. This affects an unknown function of the file /manufacturer/editunit.php. This manipulation of the argument ID causes sql injection. The attack may be initiated remotely. The exploit has been published and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-13259?
CVE-2025-13259 is classified as a critical SQL injection vulnerability affecting the Campcodes Supplier Management System.
How do I fix CVE-2025-13259?
To fix CVE-2025-13259, sanitize and validate all user inputs and implement prepared statements for database queries in the affected function.
What systems are affected by CVE-2025-13259?
CVE-2025-13259 affects Campcodes Supplier Management System version 1.0 as it has a vulnerability in the edit_unit.php file.
Can CVE-2025-13259 be exploited remotely?
Yes, CVE-2025-13259 can be exploited remotely due to the nature of the SQL injection vulnerability.
What type of attack does CVE-2025-13259 facilitate?
CVE-2025-13259 facilitates SQL injection attacks, allowing attackers to manipulate database queries through the vulnerable function.