Description


A flaw has been found in Campcodes Supplier Management System 1.0. Affected by this issue is some unknown functionality of the file /retailer/edit_profile.php. This manipulation of the argument txtRetailerAddress causes sql injection. Remote exploitation of the attack is possible. The exploit has been published and may be used.

Related CPE's


Could not find any relations

Weaknesses



CWE-74CWE-89

CVSS impact metrics


CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

6.3 · Medium

Information


Source identifier

[email protected]

Vulnerability status

Received

Published

2026-01-05T15:15:45.580Z

41 hours ago

Last modified

2026-01-05T15:15:45.580Z

41 hours ago