CVE-2025-9794 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

A flaw has been found in Campcodes Computer Sales and Inventory System 1.0. The affected element is an unknown function of the file /pages/pos_transac.php?actio…
Medium CVSS: 6.9

CVE-2025-9794

A flaw has been found in Campcodes Computer Sales and Inventory System 1.0. The affected element is an unknown function of the file /pages/pos_transac.php?action=add. Executing manipulation of the argument cash/firstname can lead to sql injection. The attack may be performed from remote. The exploit has been published and may be used. Other parameters might be affected as well.
Vendor
Campcodes
Product
Computer Sales And Inventory System
CWE
CWE-74
Yayın Tarihi
2025-09-01 21:15:29
Güncelleme
2025-09-03 15:53:51
Source Identifier
cna@vuldb.com
KEV Date Added
-

Kategoriler

CWE-74 Computer Sales And Inventory System MEDIUM Campcodes 2025

Referanslar

https://github.com/Yuanwennnn/cve/issues/2 https://github.com/e1evensu/cve/issues/1 https://vuldb.com/?ctiid.322109 https://vuldb.com/?id.322109 https://vuldb.com/?submit.641103 https://vuldb.com/?submit.642559 https://www.campcodes.com/ https://github.com/Yuanwennnn/cve/issues/2 https://github.com/e1evensu/cve/issues/1