CVE-2025-4718: Campcodes Sales and Inventory System customer_add.php sql injection
A vulnerability has been found in Campcodes Sales and Inventory System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /pages/customeradd.php. The manipulation of the argument last leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-4718?
CVE-2025-4718 is classified as a critical vulnerability.
How does CVE-2025-4718 impact the Campcodes Sales and Inventory System?
CVE-2025-4718 allows for SQL injection through the manipulation of the 'last' argument in the /pages/customer_add.php file.
How do I fix CVE-2025-4718?
To fix CVE-2025-4718, ensure proper validation and sanitization of user inputs in the /pages/customer_add.php file.
Who is affected by CVE-2025-4718?
CVE-2025-4718 affects users of the Campcodes Sales and Inventory System version 1.0.
Can CVE-2025-4718 lead to data breaches?
Yes, CVE-2025-4718 can lead to data breaches by allowing attackers to execute unauthorized SQL queries.