← CVE Intelligence

CVE-2025-13260

Campcodes Supplier Management System edit_product.php sql injection PUBLISHED

Description (CNA)

A vulnerability has been found in Campcodes Supplier Management System 1.0. This impacts an unknown function of the file /manufacturer/edit_product.php. Such manipulation of the argument cmbProductUnit leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

Affected (CNA)

Vendor / productVersions
Campcodes / Supplier Management Systemaffected 1.0

CWE

CWE-89, CWE-74

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.