CVE-2025-13291: Campcodes Supplier Management System confirm_order.php sql injection
A vulnerability was found in Campcodes Supplier Management System 1.0. This affects an unknown part of the file /manufacturer/confirmorder.php. Performing a manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The exploit has been made public and could be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-13291?
CVE-2025-13291 is classified as a critical vulnerability due to its ability to allow SQL injection attacks.
How do I fix CVE-2025-13291?
To fix CVE-2025-13291, ensure proper sanitization and validation of user input in the /manufacturer/confirm_order.php file.
What systems are affected by CVE-2025-13291?
CVE-2025-13291 affects Campcodes Supplier Management System version 1.0.
Can CVE-2025-13291 be exploited remotely?
Yes, CVE-2025-13291 can be exploited remotely, allowing attackers to execute SQL injection attacks.
Is there a public exploit available for CVE-2025-13291?
Yes, CVE-2025-13291 has been made public, and exploit details are available.