Description
CampCodes Sales and Inventory System是CampCodes公司的一个销售和库存系统。 Campcodes Sales and Inventory System 1.0版本存在注入漏洞，该漏洞源于对文件/pages/product_update.php中参数ID的错误操作导致SQL注入。
CampCodes Sales and Inventory System 注入漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://cve.imfht.com/detail/CVE-2025-4713
https://vuldb.com/zh/?id.309009
https://github.com/dragonghost2025/cve/issues/6
https://www.sentinelone.com/vulnerability-database/cve-2025-6314/
https://www.linkedin.com/posts/vulns-space_cve20254741-campcodessalesandinventorysystem-activity-7329002836069945344-sR0U
https://www.redpacketsecurity.com/cve-alert-cve-2025-9794-campcodes-computer-sales-and-inventory-system/
https://radar.offseq.com/threat/cve-2025-11109-sql-injection-in-campcodes-computer-931cfc0c
https://cvefeed.io/vuln/detail/CVE-2025-9923
https://app.opencve.io/cve/?vendor=campcodes&product=sales_and_inventory_system
https://afaghhosting.net/blog/cve-2025-4503-campcodes-sales-and-inventory-system-sql-injection/
https://cert.kenet.or.ke/index.php/cve-2025-4746-campcodes-sales-and-inventory-system-sql-injection-vulnerability
https://nvd.nist.gov/vuln/detail/CVE-2025-9923