CVE-2025-9794 : faille critique campcodes computer sales and inventory… (CVSS 9.8)

A flaw has been found in Campcodes Computer Sales and Inventory System 1.0. The affected element is an unknown function of the file /pages/pos_transac.php?action=add. Executing manipulation of the argument cash/firstname can lead to sql injection. The attack may be performed from remote. The exploit has been published and may be used. Other parameters might be affected as well.

Sévérité

Critique (CVSS 9.8)

Vecteur CVSS

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitation active

Non signalée par la CISA

Publication

1 sept. 2025

Dernière mise à jour

17 juin 2026

• campcodes computer sales and inventory system

• Fiche CVE-2025-9794 sur le NVD (NIST)
• github.com/Yuanwennnn/cve/issues/2
• github.com/e1evensu/cve/issues/1
• vuldb.com/
• vuldb.com/
• vuldb.com/
• vuldb.com/
• campcodes.com/