CVE-2025-9692: Campcodes Online Shopping System product.php sql injection
A vulnerability was found in Campcodes Online Shopping System 1.0. Affected is an unknown function of the file /product.php. Performing manipulation of the argument p results in sql injection. The attack may be initiated remotely. The exploit has been made public and could be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-9692?
CVE-2025-9692 is categorized as a high severity vulnerability due to the potential for remote SQL injection.
How do I fix CVE-2025-9692?
To fix CVE-2025-9692, sanitize and validate the input values for the 'p' argument in the /product.php file.
What systems are affected by CVE-2025-9692?
CVE-2025-9692 affects the Campcodes Online Shopping System version 1.0.
Can CVE-2025-9692 be exploited remotely?
Yes, CVE-2025-9692 can be exploited remotely by manipulating the 'p' argument.
What type of vulnerability is CVE-2025-9692?
CVE-2025-9692 is an SQL injection vulnerability that allows attackers to execute arbitrary SQL code on the database.