CVE-2025-4875: Campcodes Online Shopping Portal forgot-password.php sql injection
A vulnerability was found in Campcodes Online Shopping Portal 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /forgot-password.php. The manipulation of the argument email leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-4875?
CVE-2025-4875 has been declared as critical due to its potential for remote SQL injection attacks.
How does CVE-2025-4875 affect the Campcodes Online Shopping Portal?
CVE-2025-4875 affects the /forgot-password.php file, allowing attackers to manipulate the email argument to execute SQL injection.
Can CVE-2025-4875 be exploited remotely?
Yes, CVE-2025-4875 can be exploited remotely, making it particularly dangerous.
What type of attack is associated with CVE-2025-4875?
CVE-2025-4875 is associated with SQL injection attacks, which can compromise the database.
How can organizations protect against CVE-2025-4875?
Organizations can protect against CVE-2025-4875 by implementing input validation and using prepared statements for database queries.