CVE-2025-4714: Campcodes Sales and Inventory System reprint.php sql injection
Published May 15, 2025
·Updated
A vulnerability was found in Campcodes Sales and Inventory System 1.0. It has been classified as critical. Affected is an unknown function of the file /pages/reprint.php. The manipulation of the argument sid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Affected Software
2 affected components
Campcodes Sales and Inventory System
Campcodes Sales and Inventory System=1.0
Event History
May 15, 2025
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·07:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2025-4714?
CVE-2025-4714 has been classified as critical.
2
How does CVE-2025-4714 affect the Campcodes Sales and Inventory System?
CVE-2025-4714 affects an unknown function in the file /pages/reprint.php, leading to SQL injection.
3
Can CVE-2025-4714 be exploited remotely?
Yes, CVE-2025-4714 can be exploited remotely.
4
What is the cause of the vulnerability in CVE-2025-4714?
The vulnerability in CVE-2025-4714 is caused by improper handling of the argument 'sid'.
5
How can I mitigate the risk of CVE-2025-4714?
To mitigate the risk of CVE-2025-4714, it is recommended to sanitize inputs and implement parameterized queries.