CVE-2025-4746: Campcodes Sales and Inventory System purchase_delete.php sql injection
A vulnerability has been found in Campcodes Sales and Inventory System 1.0 and classified as critical. This vulnerability affects unknown code of the file /pages/purchasedelete.php. The manipulation of the argument prid leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-4746?
CVE-2025-4746 is classified as critical due to the potential for remote SQL injection attacks.
How do I fix CVE-2025-4746?
To fix CVE-2025-4746, sanitize and validate user input for the 'pr_id' parameter in the purchase_delete.php file.
What systems are affected by CVE-2025-4746?
CVE-2025-4746 affects the Campcodes Sales and Inventory System version 1.0.
Can CVE-2025-4746 be exploited remotely?
Yes, CVE-2025-4746 can be exploited remotely through vulnerable input in the purchase_delete.php file.
What type of vulnerability is CVE-2025-4746?
CVE-2025-4746 is an SQL injection vulnerability that allows an attacker to manipulate database queries.