CVE-2025-4929: Campcodes Online Shopping Portal my-account.php sql injection
A vulnerability was found in Campcodes Online Shopping Portal 1.0. It has been rated as critical. This issue affects some unknown processing of the file /my-account.php. The manipulation of the argument Name leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-4929?
CVE-2025-4929 has been rated as critical due to its potential for remote SQL injection attacks.
How do I fix CVE-2025-4929?
To fix CVE-2025-4929, ensure that input validation and parameterized queries are implemented in the affected file /my-account.php.
What software is affected by CVE-2025-4929?
CVE-2025-4929 affects Campcodes Online Shopping Portal version 1.0.
Can CVE-2025-4929 be exploited remotely?
Yes, CVE-2025-4929 can be exploited remotely due to the SQL injection vulnerability.
What is the impact of CVE-2025-4929?
The impact of CVE-2025-4929 includes unauthorized access to the database, data manipulation, and potential data leakage.