CVE-2025-14514: Campcodes Supplier Management System add_distributor.php sql injection
A flaw has been found in Campcodes Supplier Management System 1.0. Affected is an unknown function of the file /admin/adddistributor.php. This manipulation of the argument txtDistributorAddress causes sql injection. The attack can be initiated remotely. The exploit has been published and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-14514?
CVE-2025-14514 is classified as a high-severity vulnerability due to its potential for SQL injection attacks.
How do I fix CVE-2025-14514?
To fix CVE-2025-14514, validate and sanitize all user inputs in the affected add_distributor.php file to prevent SQL injection.
What systems are affected by CVE-2025-14514?
CVE-2025-14514 affects the Campcodes Supplier Management System 1.0.
Can CVE-2025-14514 be exploited remotely?
Yes, CVE-2025-14514 can be exploited remotely, allowing attackers to manipulate the SQL queries.
What part of the Campcodes Supplier Management System is vulnerable in CVE-2025-14514?
The vulnerability in CVE-2025-14514 resides in the function handling the txtDistributorAddress argument in the /admin/add_distributor.php file.