CVE-2025-6314: Campcodes Sales and Inventory System cat_update.php sql injection
Published Jun 20, 2025
·Updated
A vulnerability was found in Campcodes Sales and Inventory System 1.0. It has been classified as critical. Affected is an unknown function of the file /pages/catupdate.php. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Affected Software
2 affected components
Campcodes Sales and Inventory System
Campcodes Sales and Inventory System=1.0
Event History
Jun 20, 2025
CVE Published
via MITRE·06:31 AM
Data Sourced
via MITRE·06:31 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·07:15 AM
DescriptionSeverityWeaknessAffected Software
Jun 11, 58473
Event
via NVD·08:04 AM
Frequently Asked Questions
1
What is the severity of CVE-2025-6314?
CVE-2025-6314 has been classified as a critical vulnerability.
2
How does CVE-2025-6314 affect the Campcodes Sales and Inventory System?
CVE-2025-6314 allows for SQL injection through the manipulation of the ID argument in the /pages/cat_update.php file.
3
Can CVE-2025-6314 be exploited remotely?
Yes, CVE-2025-6314 can be exploited remotely.
4
What versions of Campcodes Sales and Inventory System are affected by CVE-2025-6314?
CVE-2025-6314 affects version 1.0 of the Campcodes Sales and Inventory System.
5
How can I mitigate the risks associated with CVE-2025-6314?
To mitigate risks from CVE-2025-6314, validate and sanitize all user inputs related to the ID argument.