CNNVD-202506-2636 Information
Jun 20, 2025
cve
CNNVD ID
CNNVD-202506-2636
Related CVE
- CNNVD Published: 2025-06-20
Description (Chinese)
CampCodes Sales and Inventory System是CampCodes公司的一个销售和库存系统。 CampCodes Sales and Inventory System 1.0版本存在注入漏洞,该漏洞源于文件/pages/cat_update.php中参数ID处理不当导致SQL注入,可能导致远程攻击。
Description (English)
CampCodes Sales and Information Systems is a sales and inventory system of CampCodes. There is an injection loophole in version 1.0 of CampCodes Sales and Information Systems, which stems from the mishandling of parameter ID in document/pages/cat update.php, which leads to the injection of SQL, which may lead to a remote attack.
Hazard Level
Medium
Vulnerability Type
注入
Affected Vendor
CampCodes
Published
2025-06-20
Last Modified
2026-02-24
References
https://github.com/dragonghost2025/cve/issues/5 https://vuldb.com/?ctiid.313314 https://vuldb.com/?id.313314 https://vuldb.com/?submit.595944 https://www.campcodes.com/
Share on: