CVE-2025-5079: PHPGurukul/Campcodes Online Shopping Portal updateorder.php sql injection
A flaw has been found in PHPGurukul/Campcodes Online Shopping Portal 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/updateorder.php. Executing manipulation of the argument remark can lead to sql injection. The attack may be performed from remote. The exploit has been published and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-5079?
CVE-2025-5079 has been rated as critical due to its potential for remote SQL injection.
How does CVE-2025-5079 affect the Campcodes Online Shopping Portal?
CVE-2025-5079 allows attackers to manipulate input in the /admin/updateorder.php file, leading to SQL injection vulnerabilities.
What is the impact of a successful exploit of CVE-2025-5079?
Successful exploitation of CVE-2025-5079 could allow an attacker to execute arbitrary SQL commands on the database.
How can I fix CVE-2025-5079?
To fix CVE-2025-5079, ensure that input validation and prepared statements are implemented to prevent SQL injection.
Which version of Campcodes Online Shopping Portal is affected by CVE-2025-5079?
CVE-2025-5079 affects Campcodes Online Shopping Portal version 1.0.