CVE-2025-4707: Campcodes Sales and Inventory System transaction_add.php sql injection
A vulnerability was found in Campcodes Sales and Inventory System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /pages/transactionadd.php. The manipulation of the argument prodname leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-4707?
CVE-2025-4707 has been rated as critical.
How does CVE-2025-4707 affect the Campcodes Sales and Inventory System?
CVE-2025-4707 affects some unknown processing of the file /pages/transaction_add.php leading to SQL injection.
What type of attack can be initiated with CVE-2025-4707?
The attack related to CVE-2025-4707 may be initiated remotely.
What input parameter is vulnerable in CVE-2025-4707?
The vulnerability in CVE-2025-4707 involves the manipulation of the argument prod_name.
How can I mitigate CVE-2025-4707?
To mitigate CVE-2025-4707, ensure proper input validation and sanitization for the prod_name parameter.