CVE-2025-14515: Campcodes Supplier Management System add_unit.php sql injection
A vulnerability has been found in Campcodes Supplier Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/addunit.php. Such manipulation of the argument txtunitDetails leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-14515?
CVE-2025-14515 is classified as a high severity vulnerability due to the potential for remote SQL injection attacks.
How do I fix CVE-2025-14515?
To fix CVE-2025-14515, it is recommended to sanitize and validate user inputs in the /admin/add_unit.php file to prevent SQL injection.
What are the potential impacts of exploiting CVE-2025-14515?
Exploiting CVE-2025-14515 can allow attackers to execute arbitrary SQL queries, potentially leading to data leakage or database manipulation.
Is CVE-2025-14515 easy to exploit?
Yes, CVE-2025-14515 is considered easy to exploit due to the lack of input validation in the affected functionality.
Which version of Campcodes Supplier Management System is affected by CVE-2025-14515?
CVE-2025-14515 affects Campcodes Supplier Management System version 1.0 specifically.