CVE-2025-4708: Campcodes Sales and Inventory System sales_add.php sql injection
Published May 15, 2025
·Updated
A vulnerability classified as critical has been found in Campcodes Sales and Inventory System 1.0. Affected is an unknown function of the file /pages/salesadd.php. The manipulation of the argument discount leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Affected Software
2 affected components
Campcodes Sales and Inventory System
Campcodes Sales and Inventory System=1.0
Event History
May 15, 2025
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·05:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2025-4708?
CVE-2025-4708 is classified as a critical severity vulnerability.
2
What type of vulnerability is CVE-2025-4708?
CVE-2025-4708 is an SQL injection vulnerability.
3
How can an attacker exploit CVE-2025-4708?
An attacker can exploit CVE-2025-4708 remotely by manipulating the 'discount' argument in the sales_add.php file.
4
What version of Campcodes Sales and Inventory System is affected by CVE-2025-4708?
CVE-2025-4708 affects Campcodes Sales and Inventory System version 1.0.
5
How do I fix CVE-2025-4708?
To fix CVE-2025-4708, validate and sanitize all user inputs before processing them in database queries.