CVE-2025-13260: Campcodes Supplier Management System edit_product.php sql injection
A vulnerability has been found in Campcodes Supplier Management System 1.0. This impacts an unknown function of the file /manufacturer/editproduct.php. Such manipulation of the argument cmbProductUnit leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-13260?
CVE-2025-13260 has a high severity due to the presence of an SQL injection vulnerability.
How do I fix CVE-2025-13260?
To fix CVE-2025-13260, ensure that input validation and parameterized queries are implemented in the affected function.
What software is affected by CVE-2025-13260?
CVE-2025-13260 affects Campcodes Supplier Management System version 1.0.
Is remote exploitation possible for CVE-2025-13260?
Yes, CVE-2025-13260 can be exploited remotely due to its nature.
What specific component is vulnerable in CVE-2025-13260?
The specific component vulnerable in CVE-2025-13260 is the file /manufacturer/edit_product.php.