CVE-2025-5078: PHPGurukul/Campcodes Online Shopping Portal subcategory.php sql injection
Published May 22, 2025
·Updated
A vulnerability was detected in PHPGurukul/Campcodes Online Shopping Portal 1.0. Affected is an unknown function of the file /admin/subcategory.php. Performing manipulation of the argument Category results in sql injection. The attack is possible to be carried out remotely. The exploit is now public and may be used.
Affected Software
3 affected components
Campcodes Online Shopping Portal
Campcodes Online Shopping Portal=1.0
Phpgurukul Online Shopping Portal=1.0
Event History
May 22, 2025
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·02:16 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-5078?
CVE-2025-5078 has been declared as critical.
2
What kind of vulnerability is CVE-2025-5078?
CVE-2025-5078 is a SQL injection vulnerability.
3
How can CVE-2025-5078 be exploited?
The attack for CVE-2025-5078 can be initiated remotely by manipulating the argument Category.
4
What file is affected by CVE-2025-5078?
CVE-2025-5078 affects the file /admin/subcategory.php.
5
How do I fix CVE-2025-5078?
To fix CVE-2025-5078, implement proper input validation and prepared statements in the application.