CVE-2025-5057: Campcodes Online Shopping Portal insert-product.php sql injection
A vulnerability was found in Campcodes Online Shopping Portal 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/insert-product.php. The manipulation of the argument Category leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-5057?
CVE-2025-5057 has been rated as critical.
What is the impact of CVE-2025-5057?
CVE-2025-5057 allows for SQL injection via the Category argument in /admin/insert-product.php.
How do I fix CVE-2025-5057?
To fix CVE-2025-5057, it is recommended to sanitize and validate all user inputs in the vulnerable script.
Which component is affected by CVE-2025-5057?
CVE-2025-5057 affects the Campcodes Online Shopping Portal version 1.0.
Who is the vendor for CVE-2025-5057?
The vendor for CVE-2025-5057 is Campcodes.