CVE-2025-7470: Campcodes Sales and Inventory System product_add.php unrestricted upload
Published Jul 12, 2025
·Updated
A vulnerability was found in Campcodes Sales and Inventory System 1.0. It has been classified as critical. Affected is an unknown function of the file /pages/productadd.php. The manipulation of the argument image leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Affected Software
2 affected components
Campcodes Sales and Inventory System
Campcodes Sales and Inventory System=1.0
Event History
Jul 12, 2025
CVE Published
via MITRE·11:02 AM
Data Sourced
via MITRE·11:02 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·11:15 AM
DescriptionSeverityWeaknessAffected Software
Jun 11, 58473
Event
via NVD·07:35 AM
Frequently Asked Questions
1
What is the severity of CVE-2025-7470?
CVE-2025-7470 is classified as a critical vulnerability.
2
What software is affected by CVE-2025-7470?
CVE-2025-7470 affects Campcodes Sales and Inventory System version 1.0.
3
How do I fix CVE-2025-7470?
To fix CVE-2025-7470, restrict file upload functionality and validate uploaded images properly.
4
What type of vulnerability is CVE-2025-7470?
CVE-2025-7470 is an unrestricted file upload vulnerability.
5
Can CVE-2025-7470 be exploited remotely?
Yes, CVE-2025-7470 allows for remote exploitation through the affected upload functionality.