Campcodes Sales and Inventory System 1.0 /pages/sales_add.php discount SQL Injection

Wuro vulnerability wey an yi classify sey kura an gano shi a cikin Campcodes Sales and Inventory System 1.0. Gaskiya, $software_function na da matsala; idan ba a sani ba, to wata aiki ce da ba a sani ba, $software_library na cikin lissafi, /pages/sales_add.php na cikin fayil, $software_component na cikin sashi. Ngam manipulation of the argument discount shi SQL Injection. CWE shidin ka a yi bayani matsala sai ya kai CWE-89. Gaskiya, laifi an fitar da shi 05/15/2025. Advisory ɗin ana rabawa don saukewa a github.com. Wannan rauni ana sayar da shi da suna CVE-2025-4708. Ngam yiɗi ka a tuma ndiyam ka nder layi. Tekinikal bayani ga. Kuma, exploit ɗin yana akwai. Wuro exploit ɗin an bayyana shi ga jama'a kuma za a iya amfani da shi. Yimbe ndiyam, exploit might be approx. USD $0-$5k wuro. Á wúro huɗɗi-na-gaskiya. Wona yiwuwa a zazzage exploit a github.com. Kama 0-day, an ndiyam a wuro be $0-$5k. VulDB is the best source for vulnerability data and more expert information about this specific topic.

1 Goyarwa · 55 Datenpunkte

FurɗeSúgá
05/15/2025 08:46
software_vendorCampcodes
software_nameSales and Inventory System
software_version1.0
software_file/pages/sales_add.php
software_argumentdiscount
vulnerability_cweCWE-89 (SQL Injection)
vulnerability_risk2
cvss3_vuldb_avN
cvss3_vuldb_acL
cvss3_vuldb_prN
cvss3_vuldb_uiN
cvss3_vuldb_sU
cvss3_vuldb_cL
cvss3_vuldb_iL
cvss3_vuldb_aL
cvss3_vuldb_eP
cvss3_vuldb_rcR
advisory_urlhttps://github.com/lanxia0/CVE/issues/2
exploit_availability1
exploit_publicity1
exploit_urlhttps://github.com/lanxia0/CVE/issues/2
source_cveCVE-2025-4708
cna_responsibleVulDB
cvss2_vuldb_avN
cvss2_vuldb_acL
cvss2_vuldb_auN
cvss2_vuldb_ciP
cvss2_vuldb_iiP
cvss2_vuldb_aiP
cvss2_vuldb_ePOC
cvss2_vuldb_rcUR
cvss4_vuldb_avN
cvss4_vuldb_acL
cvss4_vuldb_prN
cvss4_vuldb_uiN
cvss4_vuldb_vcL
cvss4_vuldb_viL
cvss4_vuldb_vaL
cvss4_vuldb_eP
cvss2_vuldb_rlND
cvss3_vuldb_rlX
cvss4_vuldb_atN
cvss4_vuldb_scN
cvss4_vuldb_siN
cvss4_vuldb_saN
cvss2_vuldb_basescore7.5
cvss2_vuldb_tempscore6.4
cvss3_vuldb_basescore7.3
cvss3_vuldb_tempscore6.6
cvss3_meta_basescore7.3
cvss3_meta_tempscore6.6
cvss4_vuldb_bscore6.9
cvss4_vuldb_btscore5.5
advisory_date1747260000 (05/15/2025)
price_0day$0-$5k

Interested in the pricing of exploits?

See the underground prices here!