CNNVD-202506-2627 Information
CNNVD ID
CNNVD-202506-2627
Related CVE
- CNNVD Published: 2025-06-20
Description (Chinese)
CampCodes Sales and Inventory System是CampCodes公司的一个销售和库存系统。 CampCodes Sales and Inventory System 1.0版本存在注入漏洞，该漏洞源于文件/pages/account_add.php中参数id/amount处理不当导致SQL注入，可能导致远程攻击。
Description (English)
CampCodes Sales and Information Systems is a sales and inventory system of CampCodes. There is an injection loophole in version 1.0 of CampCodes Sales and Information Systems, which stems from the mishandling of the parameter id/amount id/amount in the document/pages/account add.php, leading to the injection of SQL, which may lead to a long-range attack.
Hazard Level
Medium
Vulnerability Type
注入
Affected Vendor
CampCodes
Published
2025-06-20
Last Modified
2026-02-24
References
https://github.com/dragonghost2025/cve/issues/1 https://vuldb.com/?ctiid.313311 https://vuldb.com/?id.313311 https://vuldb.com/?submit.595922 https://vuldb.com/?submit.595926 https://www.campcodes.com/
Share on: