Campcodes
Monthly
Campcodes Complete POS Management and Inventory System up to version 4.0.6 allows authenticated remote attackers to inject malicious input through the Environment Variable Handler in SettingsController.php, leading to information disclosure and potential system compromise. The vulnerability has publicly available exploit code and affects an undisclosed function handling environment variable manipulation, with moderate CVSS 6.3 severity driven by network-accessible attack surface and low attack complexity.
Unrestricted file upload in Campcodes Complete Online Learning Management System 1.0 allows authenticated remote attackers to upload arbitrary files via the add_lesson function in /application/models/Crud_model.php, enabling potential remote code execution or malware deployment. The vulnerability requires low-privilege authentication, carries a CVSS score of 6.3 (medium), and publicly available exploit code exists.
SQL injection in Campcodes Supplier Management System 1.0 allows authenticated remote attackers to manipulate the txtRetailerAddress parameter in /retailer/edit_profile.php and execute arbitrary database queries. Public exploit code exists for this vulnerability, and no patch is currently available. Affected organizations running PHP-based installations should implement input validation controls and restrict access to the vulnerable endpoint until patching becomes available.
A security vulnerability has been detected in campcodes School File Management System 1.0. The affected element is an unknown function of the file /save_file.php. [CVSS 6.3 MEDIUM]
Stored cross-site scripting (XSS) in Campcodes Park Ticketing System 1.0 allows high-privileged users to inject malicious scripts via the name/ride parameter in the save_pricing function of admin_class.php, affecting user sessions with user interaction. Publicly available exploit code exists, though EPSS scoring (0.02%) and high privilege requirement (PR:H) suggest limited real-world exploitation likelihood despite the low CVSS score of 1.9.
SQL injection in Campcodes Supplier Management System 1.0 allows remote unauthenticated attackers to execute arbitrary SQL commands via the chkId[] parameter in /admin/view_products.php, potentially leading to data exposure, modification, or service disruption. The vulnerability has publicly available exploit code and a low EPSS score (0.04%), with no indication of active exploitation.
SQL injection in Campcodes Supplier Management System 1.0 allows remote unauthenticated attackers to execute arbitrary SQL commands via the txtAreaCode parameter in /admin/add_area.php. A public exploit is available, but no active exploitation in CISA KEV and EPSS probability is very low (0.04%). Attackers can extract or modify database contents with low impact to confidentiality, integrity, and availability per CVSS.
Cross-site scripting in Campcodes Complete Online Beauty Parlor Management System 1.0 allows authenticated administrators to inject arbitrary JavaScript via the 'searchdata' parameter in the admin invoice search page. An attacker with high privileges can craft a request that, when viewed by another admin, executes malicious scripts, potentially leading to session hijacking or defacement. The vulnerability has a publicly available exploit but requires user interaction and administrative access.
Stored or reflected cross-site scripting (XSS) in Campcodes Complete Online Beauty Parlor Management System 1.0 allows high-privileged authenticated users to inject malicious scripts via the fromdate parameter in /admin/bwdates-reports-details.php, potentially compromising admin sessions or stealing sensitive data. Public exploit code exists, but exploitation requires admin-level privileges and user interaction (likely clicking a malicious link), limiting real-world attack surface despite CVSS 1.9 indicating minimal risk.
We are tasked with producing a JSON object synthesizing data for CVE-2025-14990. CVE ID: CVE-2025-14990 Description: "A security flaw has been discovered in Campcodes Complete Online Beauty Parlor Management System 1.0. Impacted is an unknown function of the file /admin/view-appointment.php. Performing a manipulation of the argument viewid results in sql injection. The attack may be initiated remotely. The exploit has been released to the public and may be used for attacks." Given: CVSS Score: 5.5? Actually the CVSS vector provided is a 4.0 vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X The score 5.5 is likely the base score from that vector. Let's assume CVSS 4.0 base score 5.5 (low). The vector indicates: AV:N, AC:L, AT:N, PR:N, UI:N, VC:L/VI:L/VA:L, SC:N/SI:N/SA:N. So it's a network-vector, low attack complexity, no privileges, no user interaction, low impact on vulnerable system (confidentiality, integrity, availability), no impact on subsequent systems. Exploit maturity E:P (proof of concept). Overall, low severity. CWE: CWE-74 (Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')). SQL injection would normally be CWE-89, but here it's CWE-74, maybe a mistake. We'll note it's SQLi but CWE given is 74. Multi-source intel: EPSS Score: 0.05% (percentile 15%) - very low exploitation probability. POC/Exploit: Publicly available Reported by: cna@vuldb.com CPE: cpe:2.3:a:campcodes:complete_online_beauty_parlor_management_system:1.0:*:*:*:*:*:*:* Tags: PHP, SQLi, Complete Online Beauty Parlor Management System References: github issue, vuldb entries, campcodes homepage. We need to produce fields: product_name: "Complete Online Beauty Parlor Management System" - but that's long, maybe "Beauty Parlor Management System"? The CPE product name is "complete_online_beauty_parlor_management_system". Short: "Complete Online Beauty Parlor Management System" (still long) but they said 1-3 words ONLY. Could be "Beauty Parlor CMS"? But better: "Beauty Parlor Management". However, the exact name is "Complete Online Beauty Parlor Management System". 1-3 words: "Beauty Parlor System"? That might lose clarity. I'll choose "Beauty Parlor Management" (3 words). Or "Complete Online Beauty Parlor" is 3 words? Actually "Complete Online Beauty" is 3 words. But product name: "Campcodes Complete Online Beauty Parlor Management System". I'll pick "Beauty Parlor Management" as shorthand. But the requirement: "1-3 words ONLY. The specific product or service name affected." I'll use "Beauty Parlor MS" (MS for Management System) but that might be too terse. I'll use "Online Beauty Parlor System". That's 4 words? Online (1) Beauty (2) Parlor (3) System (4) -> 4. I could drop "Online": "Beauty Parlor System" is 3. Or "Beauty Parlor CMS"? The software might not be a CMS. I'll go with "Beauty Parlor Management System"? That's 4 words. Maybe "Beauty Parlor Mgmt" but Mgmt is not a word. The rule says "1-3 words ONLY." So I need a very short product name. The vendor is Campcodes, the product is "Complete Online Beauty Parlor Management System". I could say "Beauty Parlor System" (3 words). Yes, that works. I'll use "Beauty Parlor System". The CPE confirms it's version 1.0. summary: Must be original synthesis, not copy of description. Start with specific impact verb and product. E.g., "SQL injection in Beauty Parlor System 1.0 allows remote attackers to manipulate appointment data via viewid parameter." Include EPSS risk: "EPSS predicts very low exploitation probability (0.05%), but a public exploit is available." Mention CWE and KEV? Not in KEV. So "no known active exploitation." Noted: POC is public. technical_context: Mention that it's a PHP web application, the vulnerability is SQL injection in the /admin/view-appointment.php endpoint through the viewid parameter. CWE-74 indicates injection, though SQLi is typically CWE-89. The CPE specifies the exact product and version. The underlying technology: PHP and likely MySQL. risk_assessment: CVSS 4.0 base score 5.5 Medium (Low impact, network, low attack complexity, no privs needed). EPSS 0.05% suggests very unlikely to be exploited in the wild. Not in KEV. POC exists, so possible targeted attacks. The application is a niche beauty parlor management system, likely limited enterprise deployment, so real-world risk is low. SSVC: Exploitation: PoC (public), Automatable: Yes (network, low complexity), Technical Impact: Partial (low impact on confidentiality, integrity, availability). So priority might be moderate only for organizations using this specific software. Compare signals: high ease of exploitation (remote, no auth) but low impact and low prevalence reduces urgency. affected_products: "Campcodes Complete Online Beauty Parlor Management System version 1.0, as per CPE cpe:2.3:a:campcodes:complete_online_beauty_parlor_management_system:1.0. The affected file is /admin/view-appointment.php. No vendor advisory link is provided; references include VulDB entries and a GitHub issue." remediation: No official fix mentioned. Since no vendor advisory is available, suggest: "No vendor patch identified. Mitigation: Disable the affected endpoint /admin/view-appointment.php if not needed, or apply input validation to sanitize the viewid parameter. Restrict network access to the admin panel to trusted IPs. Regularly monitor for SQLi attempts." Since it's a remote unauthenticated injection, the best immediate step is to filter the parameter. Provide specific: "Apply a Web Application Firewall rule to block SQLi patterns on the viewid parameter. Note that the application is from Campcodes, possibly discontinued, so consider replacing the software if it is mission-critical." No patch available. exploit_scenario: "An attacker sends a crafted HTTP GET request to /admin/view-appointment.php?viewid=1' OR '1'='1, exploiting the SQL injection to extract database information, modify appointment records, or potentially gain further access to the underlying server if database privileges allow." exploitation_conditions: From CVSS: AV:N, AC:L, PR:N, UI:N, so no authentication required, remotely exploitable, no user interaction. So conditions: "No special conditions — remote unauthenticated exploitation against default configurations of Beauty Parlor System 1.0. The /admin/view-appointment.php endpoint is publicly accessible and does not require authentication." No limiting factors beyond maybe the admin interface might be somewhat hidden, but default is often accessible. So "unauthenticated". attack_chain: "Reconnaissance of web application → Send malicious SQL payload in viewid parameter → Backend PHP code concatenates input into SQL query → SQL query executed, data exfiltration or modification." More concisely: "Identify /admin/view-appointment.php endpoint → Inject SQL via viewid → Database executes malicious query → Extract/modify appointment data". That's 4 steps. confidence_notes: What is confirmed: Vulnerability in /admin/view-appointment.php of Campcodes Complete Online Beauty Parlor Management System 1.0, disclosed publicly via VulDB and GitHub. Exploit PoC available. Not confirmed: Active exploitation (no KEV). No vendor advisory found; patch status unknown. The CWE is given as CWE-74, but SQL injection is typically CWE-89 — possible misclassification. prevalence: The software is a niche product for beauty parlors, likely low deployment in enterprise environments. So prevalence: "low". Basis: "niche vertical application for small businesses" (max 12 words). I'll use "low" and basis "small business beauty parlor management software". assessed_cvss_vector: Given CVSS 4.0 vector already provided. But the task says: "Your OWN independent CVSS 3.1 base-metric vector ... grounded in the description and exploitation conditions — NOT a copy of any score in the input." So we need to assign a 3.1 vector. According to description: network attack vector, low complexity, no privileges (since it seems unauthenticated — the description doesn't mention auth, but CVSS 4.0 gave PR:N), no user interaction. Impact: SQL injection could lead to data leakage and data manipulation, but CVSS 4.0 gave Low for all. For 3.1, we'd have: AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N maybe? Or could be C:L/I:L/A:L? SQLi often leads to database compromise, which can affect availability too. I'll assign C:L/I:L/A:L (all low) as it's a database injection, but scope unchanged. Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L. That's a score of 7.3? Actually CVSS 3.1 with C:L/I:L/A:L and everything else low gets 7.3 (High). But original 4.0 score is 5.5. The difference is that 4.0 has separate vulnerable system impact and subsequent impact, and here it's low impact across all three. In 3.1, low impact on all three with AV:N/AC:L/PR:N/UI:N/S:U yields 7.3. That might be too high. The 4.0 vector gave VC:L/VI:L/VA:L (low). Equivalent 3.1 would be the same: C:L/I:L/A:L. So I'll use that. Rationale: "Remote, unauthenticated SQL injection with low impact to confidentiality, integrity, and availability of the database." assessed_cvss40_vector: We can use the same as provided but we'll justify: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N. That's fine. Rationale: "Attack requires only network access, no privileges; impact is limited to low on the vulnerable component." Now compile into JSON. Ensure all fields are plain text strings, no arrays. product_name: "Beauty Parlor System" summary: "SQL injection in Campcodes Beauty Parlor System 1.0 allows remote attackers to manipulate or exfiltrate appointment data via the viewid parameter in /admin/view-appointment.php. The vulnerability is remotely exploitable with no authentication, has a publicly available exploit, but EPSS predicts very low (0.05%) exploitation probability. There is no evidence of active exploitation in the wild." technical_context: "The vulnerability exists in the PHP-based Campcodes Complete Online Beauty Parlor Management System 1.0. The offending endpoint /admin/view-appointment.php fails to properly sanitize the 'viewid' input, leading to SQL injection (CWE-74, though typically categorized as CWE-89). The CPE identifies the affected application exactly, and the vulnerability is exploitable against the database back-end, likely MySQL." risk_assessment: "CVSS 4.0 base score 5.5 (Medium) with vector AV:N/AC:L/PR:N/UI:N, indicating easy remote exploitation but only low impact to confidentiality, integrity, and availability. EPSS gives a 0.05% chance of exploitation in the next 30 days, in the 15th percentile, suggesting almost negligible real-world threat. No CISA KEV entry. A public proof-of-concept (PoC) exists, enabling scripted attacks, but the product is a niche beauty parlor management system with likely minimal enterprise footprint. SSVC assessment: Exploitation (PoC), Automatable (Yes), Technical Impact (Partial). Overall, this is a low-priority issue except for organizations actively using this exact software." affected_products: "Campcodes Complete Online Beauty Parlor Management System version 1.0 (cpe:2.3:a:campcodes:
SQL injection in Online Beauty Parlor System 1.0 allows remote attackers to manipulate database queries through the /admin/search-invoices.php endpoint. The vulnerability carries a medium CVSS score, but exploit code is publicly available and no authentication is required, making it easy to attack. No active exploitation in the wild has been confirmed, and the EPSS probability remains low.
SQL injection in Campcodes Supplier Management System 1.0 allows remote attackers to manipulate the txtCategoryName parameter in /admin/add_category.php, potentially enabling unauthorized data access or modification. The vulnerability is unauthenticated and exploit code is publicly available, though no active exploitation in the wild has been confirmed. EPSS probability is low (0.05%), indicating limited real-world exploitation likelihood.
Improper authorization in Campcodes Advanced Voting Management System 1.0 allows authenticated remote attackers to manipulate the ID parameter in /admin/voters_edit.php, resulting in unauthorized modification of voter passwords. The vulnerability affects the Password Handler component and requires valid user credentials to exploit, limiting real-world risk despite public exploit availability. EPSS exploitation probability is low at 0.06 percentile, suggesting this flaw targets specific administrative scenarios rather than representing widespread attack potential.
SQL injection in Campcodes Supplier Management System 1.0 allows remote attackers to query, modify, or delete database records via the cmbAreaCode parameter in /admin/add_retailer.php. Public exploit code is available, but the vulnerability is not known to be actively exploited (CISA KEV). The EPSS exploitation probability is very low (0.05%), indicating limited real-world targeting.
SQL injection in Campcodes Advanced Online Examination System 1.0 allows remote attackers to manipulate the Username argument in /query/loginExe.php to inject malicious SQL. This can lead to unauthorized data access or modification. A public proof-of-concept is available, but EPSS indicates low exploitation probability.
SQL injection in Campcodes Supplier Management System 1.0 allows remote attackers to execute arbitrary SQL commands through the chkId[] parameter in /admin/view_unit.php. The vulnerability can be exploited without authentication to access or modify database contents. Exploit code is publicly available, but no active exploitation has been confirmed as of this analysis.
Unrestricted file upload in Campcodes Student Enrollment 1.0 allows remote attackers to upload arbitrary files via the photo parameter at the /admin/register.php endpoint. The vulnerability enables potential remote code execution by uploading malicious scripts (e.g., a PHP web shell). A publicly available exploit exists, but no active exploitation has been reported by CISA KEV.
Unrestricted file upload in campcodes Online Student Enrollment System 1.0 allows high-privileged authenticated users to upload arbitrary files via the userphoto parameter in /admin/index.php?page=user-profile, potentially enabling remote code execution or data exfiltration. Public exploit code is available, though the vulnerability's real-world impact is limited by the requirement for administrative credentials and low CVSS/EPSS scores.
Remote SQL injection in Campcodes Retro Basketball Shoes Online Store 1.0 allows unauthenticated attackers to manipulate the 'pid' argument in /admin/admin_running.php, leading to potential data exposure or modification. Exploit code is publicly available but no active exploitation has been confirmed (not in CISA KEV); the EPSS score of 0.05% indicates low probability of widespread exploitation despite the low attack complexity and no authentication requirement.
SQL injection in Campcodes Supplier Management System 1.0 allows remote unauthenticated attackers to execute arbitrary SQL commands via the txtunitDetails parameter in /admin/add_unit.php. Public exploit code is available, but EPSS indicates low exploitation probability (0.05%) and it is not listed in CISA KEV.
SQL injection in Campcodes Supplier Management System 1.0 allows remote attackers to manipulate database queries via the `txtDistributorAddress` parameter in `/admin/add_distributor.php`. Public exploit code is available, though the EPSS score indicates a very low probability of widespread exploitation.
Unrestricted file upload in Campcodes Retro Basketball Shoes Online Store 1.0 allows authenticated administrators to upload malicious files via the product_image parameter of /admin/admin_running.php. This can be exploited for remote code execution, and a public exploit is available. EPSS indicates very low exploitation probability (0.06%), and no active exploitation has been confirmed.
SQL injection in Campcodes School File Management System 1.0 allows unauthenticated remote attackers to inject SQL via the stud_id parameter in /update_query.php. Exploit code is publicly available, but the EPSS exploitation probability is very low (0.04%) and the CISA KEV catalog does not list it. The vulnerability has a CVSS 4.0 score of 5.5 (Medium), reflecting limited impact on confidentiality, integrity, and availability.
A vulnerability has been found in Campcodes Online Polling System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A flaw has been found in Campcodes Online Polling System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was detected in Campcodes School File Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A security vulnerability has been detected in Campcodes Supplier Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was identified in Campcodes Complete Online Beauty Parlor Management System 1.0. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability has been found in Campcodes Supplier Management System 1.0. Rated medium severity (CVSS 5.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
A flaw has been found in Campcodes Retro Basketball Shoes Online Store 1.0. Rated medium severity (CVSS 5.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
Campcodes Online Hospital Management System 1.0 is vulnerable to SQL Injection in /admin/index.php via the parameter username. Rated high severity (CVSS 7.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was determined in Campcodes Retro Basketball Shoes Online Store 1.0. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was found in Campcodes Retro Basketball Shoes Online Store 1.0. Rated medium severity (CVSS 5.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability has been found in Campcodes Retro Basketball Shoes Online Store 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was found in Campcodes Supplier Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A weakness has been identified in Campcodes School Fees Payment Management System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
A security flaw has been discovered in Campcodes School Fees Payment Management System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was identified in Campcodes School Fees Payment Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was determined in Campcodes School Fees Payment Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was found in Campcodes School Fees Payment Management System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability has been found in Campcodes School Fees Payment Management System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability has been found in Campcodes Supplier Management System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
A flaw has been found in Campcodes Supplier Management System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was identified in Campcodes School Fees Payment Management System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
A security flaw has been discovered in Campcodes School File Management 1.0. Rated medium severity (CVSS 5.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
A security flaw has been discovered in Campcodes School Fees Payment Management System 1.0.php?action=delete_course. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
SQL injection in Campcodes Retro Basketball Shoes Online Store 1.0 exposes the `/admin/admin_football.php` endpoint to database manipulation via the unsanitized `pid` parameter, achievable by remote unauthenticated attackers per the CVSS 4.0 PR:N rating. The flaw enables limited read, write, and availability impact against the backend database. A public proof-of-concept exploit has been disclosed via GitHub, though EPSS remains extremely low at 0.03% (8th percentile), consistent with this product's negligible real-world deployment footprint and no CISA KEV listing.
SQL injection in Campcodes Retro Basketball Shoes Online Store 1.0 exposes the `/admin/admin_product.php` endpoint to remote attackers who can manipulate the `pid` parameter to execute arbitrary SQL queries against the backend database. Publicly available exploit code exists (GitHub CVE issue #16), though the EPSS score of 0.01% at the 1st percentile signals negligible observed exploitation probability - consistent with a niche, low-footprint hobbyist application. This vulnerability is not listed in the CISA Known Exploited Vulnerabilities catalog.
SQL injection in Campcodes Retro Basketball Shoes Online Store 1.0 exposes the admin panel endpoint /admin/admin_feature.php to database manipulation via the unsanitized `pid` parameter. The provided CVSS 4.0 vector asserts PR:N (no privileges required), though the /admin/ path suggests authentication may be in play - this discrepancy is noted and should be verified against the actual application. A publicly available proof-of-concept exploit exists on GitHub, though the EPSS score of 0.01% (1st percentile) indicates real-world exploitation attempts remain negligible, consistent with the product's obscure deployment footprint. No vendor-released patch has been identified at time of analysis.
SQL injection in Campcodes Retro Basketball Shoes Online Store 1.0 exposes the admin login endpoint to remote, unauthenticated database manipulation via the Username parameter in /admin/admin_index.php. The CVSS 4.0 vector (AV:N/AC:L/PR:N/UI:N) confirms exploitation requires no authentication and minimal skill, and a public proof-of-concept exists on GitHub. Despite this, real-world risk is curtailed by the product's extremely niche deployment footprint, an EPSS of just 0.01% (1st percentile), and absence from CISA KEV - making mass exploitation implausible.
SQL injection in Campcodes Online Beauty Parlor Management System 1.0 allows high-privileged attackers to manipulate the searchdata parameter in /admin/search-appointment.php, enabling arbitrary database queries with limited confidentiality and integrity impact. The vulnerability requires administrative privileges to exploit and has a publicly disclosed proof-of-concept, though real-world exploitation risk is minimal given the EPSS score of 0.01% and the requirement for high-privilege access.
SQL injection in Campcodes Online Beauty Parlor Management System 1.0 allows authenticated high-privilege administrators to execute arbitrary SQL queries via the sername parameter in /admin/manage-services.php. The vulnerability requires high administrative privileges and has publicly available exploit code, though real-world impact is limited by its requirement for already-compromised admin accounts with no lateral movement or privilege escalation capability.
SQL injection vulnerability in Campcodes Online Apartment Visitor Management System 1.0 allows remote unauthenticated attackers to perform low-impact database manipulation via the /forgot-password.php email parameter. Public exploit code is available, though no active exploitation has been reported (not listed in CISA KEV), and EPSS signals very low real-world exploitation
SQL injection in Campcodes Online Apartment Visitor Management System 1.0 allows high-privileged remote attackers to manipulate the mobilenumber parameter in /admin-profile.php, potentially leading to unauthorized database access or modification. The vulnerability requires administrative privileges to exploit and has limited confidentiality and integrity impact; public exploit code is available but real-world exploitation risk remains low due to EPSS score of 0.03% and the administrative access prerequisite.
SQL injection in Campcodes Online Learning Management System 1.0 allows remote unauthenticated attackers to manipulate database queries via the date_start parameter in /admin/calendar_of_events.php. Publicly available exploit code exists, increasing risk, though the EPSS score is low (0.03%) suggesting limited active exploitation. No patch has been identified at time of analysis.
We need to produce a JSON object with all the fields as specified. Use all the data from the multi-source intelligence. Note the assigned CVSS is CVSS:4.0, not 3.1. There's also a CVSS score 5.5 but it's 4.0 vector. We must synthesize, not just paraphrase. The description: Campcodes Advanced Online Voting Management System 1.0, file /admin/login.php, unknown function, username argument leads to SQL injection, remote, exploit disclosed. We have EPSS 0.03%, low. POC publicly available. No KEV mentioned. CPE: campcodes:advanced_online_voting_system:1.0. CWE-74 (Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') but likely SQL injection is CWE-89; they gave CWE-74 which is a parent. Could mention that. The references: GitHub with exploit (vul/issues/5), vuldb links, campcodes.com. CVSS:4.0 vector: AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P. So unauthenticated, network, low complexity, no user interaction, low impact on all three (Confidentiality, Integrity, Availability), but scope is none so only vulnerable system. Exploit maturity is Proof-of-Concept (E:P). So overall base score 5.5, which is medium. The 4.0 score is 5.5 (Base). In our assessed CVSS vectors, we'll need to give both 3.1 and 4.0. We must not just copy; we need to provide our own independent assessment grounded in description. Since the description is a typical SQLi with username parameter, remote, unauthenticated (likely /admin/login.php is login page, so no authentication required to send request), low complexity, but impact? SQL injection can lead to data leakage (confidentiality), maybe data modification (integrity) but might be limited. Possibly could lead to admin access depending on SQL. The CVSS 4.0 they gave says low impact on C/I/A, no scope change. That's plausible for a login page SQLi where you can bypass authentication and maybe extract data. I'd assess similar: CVSS 3.1: maybe AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L. That's ba
Unrestricted file upload in Campcodes Advanced Online Voting System 1.0 allows authenticated attackers to upload arbitrary files via manipulation of the photo parameter in /admin/voters_add.php. The vulnerability requires valid login credentials (PR:L) but affects confidentiality, integrity, and availability with low severity. Publicly available exploit code exists; however, EPSS score of 0.04% indicates minimal real-world exploitation probability despite public POC availability.
SQL injection in Campcodes Advanced Online Voting System 1.0 allows authenticated remote attackers to manipulate the firstname parameter in /admin/voters_add.php, leading to limited confidentiality and integrity impact. The vulnerability requires valid user credentials (PR:L) and has a publicly available exploit, but EPSS scoring (0.03%, percentile 8%) suggests low real-world exploitation probability despite public POC availability.
SQL injection in Campcodes Advanced Online Voting Management System 1.0 allows authenticated remote attackers to manipulate the voter parameter in /index.php, potentially leading to unauthorized data access or modification. The vulnerability has a low CVSS score (2.1) due to authentication requirements and limited confidentiality impact, but publicly available exploit code exists and exploitation probability is rated at 8th percentile by EPSS, suggesting this remains a lower-priority issue despite public POC availability.
SQL injection in Campcodes Online Apartment Visitor Management System 1.0 allows remote attackers to execute arbitrary SQL queries via the fromdate or todate parameters in /bwdates-reports-details.php. A public proof-of-concept exploit is available, but no active exploitation has been confirmed. This could lead to unauthorized data access or manipulation.
SQL injection in Campcodes Online Apartment Visitor Management System 1.0 allows remote unauthenticated attackers to manipulate the search-visitor.php endpoint via the searchdata parameter. Public exploit code exists, though EPSS probability is low (0.03%), indicating limited exploitation interest. No active exploitation confirmed in CISA KEV.
SQL injection in Campcodes Visitor Management 1.0 allows remote attackers to manipulate database queries via the Username parameter on /index.php. Exploit code is publicly available, but the vulnerability is not known to be actively exploited. EPSS score of 0.03% suggests very low likelihood of widespread exploitation.
SQL injection in Campcodes Online Apartment Visitor Management System 1.0 allows remote unauthenticated attackers to inject SQL via the 'editid' parameter in /visitor-detail.php, potentially exfiltrating or modifying database information. Public exploit code is available, but EPSS score of 0.03% indicates low likelihood of exploitation.
A weakness has been identified in Campcodes Advanced Online Voting Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A security flaw has been discovered in Campcodes Online Learning Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was identified in Campcodes Computer Sales and Inventory System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A weakness has been identified in Campcodes Online Learning Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A security flaw has been discovered in Campcodes Farm Management System 1.0. Rated medium severity (CVSS 5.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was determined in Campcodes Online Learning Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was found in Campcodes Online Learning Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability has been found in Campcodes Online Learning Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A security flaw has been discovered in Campcodes Online Learning Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was identified in Campcodes Online Learning Management System 1.0.php. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was determined in Campcodes Online Learning Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was found in Campcodes Online Learning Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A security vulnerability has been detected in Campcodes Computer Sales and Inventory System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A security flaw has been discovered in Campcodes Point of Sale System POS 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A security flaw has been discovered in Campcodes Gym Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was identified in Campcodes Society Membership Information System 1.0.php. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability has been found in Campcodes Computer Sales and Inventory System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A flaw has been found in Campcodes Computer Sales and Inventory System 1.0.php. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was detected in Campcodes Computer Sales and Inventory System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A security flaw has been discovered in Campcodes Online Beauty Parlor Management System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was identified in Campcodes Online Beauty Parlor Management System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
A weakness has been identified in Campcodes Online Learning Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was detected in Campcodes Online Learning Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A security vulnerability has been detected in Campcodes Online Learning Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A weakness has been identified in Campcodes Farm Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A security flaw has been discovered in Campcodes Online Beauty Parlor Management System 1.0.php. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was identified in Campcodes Online Beauty Parlor Management System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
Campcodes Complete POS Management and Inventory System up to version 4.0.6 allows authenticated remote attackers to inject malicious input through the Environment Variable Handler in SettingsController.php, leading to information disclosure and potential system compromise. The vulnerability has publicly available exploit code and affects an undisclosed function handling environment variable manipulation, with moderate CVSS 6.3 severity driven by network-accessible attack surface and low attack complexity.
Unrestricted file upload in Campcodes Complete Online Learning Management System 1.0 allows authenticated remote attackers to upload arbitrary files via the add_lesson function in /application/models/Crud_model.php, enabling potential remote code execution or malware deployment. The vulnerability requires low-privilege authentication, carries a CVSS score of 6.3 (medium), and publicly available exploit code exists.
SQL injection in Campcodes Supplier Management System 1.0 allows authenticated remote attackers to manipulate the txtRetailerAddress parameter in /retailer/edit_profile.php and execute arbitrary database queries. Public exploit code exists for this vulnerability, and no patch is currently available. Affected organizations running PHP-based installations should implement input validation controls and restrict access to the vulnerable endpoint until patching becomes available.
A security vulnerability has been detected in campcodes School File Management System 1.0. The affected element is an unknown function of the file /save_file.php. [CVSS 6.3 MEDIUM]
Stored cross-site scripting (XSS) in Campcodes Park Ticketing System 1.0 allows high-privileged users to inject malicious scripts via the name/ride parameter in the save_pricing function of admin_class.php, affecting user sessions with user interaction. Publicly available exploit code exists, though EPSS scoring (0.02%) and high privilege requirement (PR:H) suggest limited real-world exploitation likelihood despite the low CVSS score of 1.9.
SQL injection in Campcodes Supplier Management System 1.0 allows remote unauthenticated attackers to execute arbitrary SQL commands via the chkId[] parameter in /admin/view_products.php, potentially leading to data exposure, modification, or service disruption. The vulnerability has publicly available exploit code and a low EPSS score (0.04%), with no indication of active exploitation.
SQL injection in Campcodes Supplier Management System 1.0 allows remote unauthenticated attackers to execute arbitrary SQL commands via the txtAreaCode parameter in /admin/add_area.php. A public exploit is available, but no active exploitation in CISA KEV and EPSS probability is very low (0.04%). Attackers can extract or modify database contents with low impact to confidentiality, integrity, and availability per CVSS.
Cross-site scripting in Campcodes Complete Online Beauty Parlor Management System 1.0 allows authenticated administrators to inject arbitrary JavaScript via the 'searchdata' parameter in the admin invoice search page. An attacker with high privileges can craft a request that, when viewed by another admin, executes malicious scripts, potentially leading to session hijacking or defacement. The vulnerability has a publicly available exploit but requires user interaction and administrative access.
Stored or reflected cross-site scripting (XSS) in Campcodes Complete Online Beauty Parlor Management System 1.0 allows high-privileged authenticated users to inject malicious scripts via the fromdate parameter in /admin/bwdates-reports-details.php, potentially compromising admin sessions or stealing sensitive data. Public exploit code exists, but exploitation requires admin-level privileges and user interaction (likely clicking a malicious link), limiting real-world attack surface despite CVSS 1.9 indicating minimal risk.
We are tasked with producing a JSON object synthesizing data for CVE-2025-14990. CVE ID: CVE-2025-14990 Description: "A security flaw has been discovered in Campcodes Complete Online Beauty Parlor Management System 1.0. Impacted is an unknown function of the file /admin/view-appointment.php. Performing a manipulation of the argument viewid results in sql injection. The attack may be initiated remotely. The exploit has been released to the public and may be used for attacks." Given: CVSS Score: 5.5? Actually the CVSS vector provided is a 4.0 vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X The score 5.5 is likely the base score from that vector. Let's assume CVSS 4.0 base score 5.5 (low). The vector indicates: AV:N, AC:L, AT:N, PR:N, UI:N, VC:L/VI:L/VA:L, SC:N/SI:N/SA:N. So it's a network-vector, low attack complexity, no privileges, no user interaction, low impact on vulnerable system (confidentiality, integrity, availability), no impact on subsequent systems. Exploit maturity E:P (proof of concept). Overall, low severity. CWE: CWE-74 (Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')). SQL injection would normally be CWE-89, but here it's CWE-74, maybe a mistake. We'll note it's SQLi but CWE given is 74. Multi-source intel: EPSS Score: 0.05% (percentile 15%) - very low exploitation probability. POC/Exploit: Publicly available Reported by: cna@vuldb.com CPE: cpe:2.3:a:campcodes:complete_online_beauty_parlor_management_system:1.0:*:*:*:*:*:*:* Tags: PHP, SQLi, Complete Online Beauty Parlor Management System References: github issue, vuldb entries, campcodes homepage. We need to produce fields: product_name: "Complete Online Beauty Parlor Management System" - but that's long, maybe "Beauty Parlor Management System"? The CPE product name is "complete_online_beauty_parlor_management_system". Short: "Complete Online Beauty Parlor Management System" (still long) but they said 1-3 words ONLY. Could be "Beauty Parlor CMS"? But better: "Beauty Parlor Management". However, the exact name is "Complete Online Beauty Parlor Management System". 1-3 words: "Beauty Parlor System"? That might lose clarity. I'll choose "Beauty Parlor Management" (3 words). Or "Complete Online Beauty Parlor" is 3 words? Actually "Complete Online Beauty" is 3 words. But product name: "Campcodes Complete Online Beauty Parlor Management System". I'll pick "Beauty Parlor Management" as shorthand. But the requirement: "1-3 words ONLY. The specific product or service name affected." I'll use "Beauty Parlor MS" (MS for Management System) but that might be too terse. I'll use "Online Beauty Parlor System". That's 4 words? Online (1) Beauty (2) Parlor (3) System (4) -> 4. I could drop "Online": "Beauty Parlor System" is 3. Or "Beauty Parlor CMS"? The software might not be a CMS. I'll go with "Beauty Parlor Management System"? That's 4 words. Maybe "Beauty Parlor Mgmt" but Mgmt is not a word. The rule says "1-3 words ONLY." So I need a very short product name. The vendor is Campcodes, the product is "Complete Online Beauty Parlor Management System". I could say "Beauty Parlor System" (3 words). Yes, that works. I'll use "Beauty Parlor System". The CPE confirms it's version 1.0. summary: Must be original synthesis, not copy of description. Start with specific impact verb and product. E.g., "SQL injection in Beauty Parlor System 1.0 allows remote attackers to manipulate appointment data via viewid parameter." Include EPSS risk: "EPSS predicts very low exploitation probability (0.05%), but a public exploit is available." Mention CWE and KEV? Not in KEV. So "no known active exploitation." Noted: POC is public. technical_context: Mention that it's a PHP web application, the vulnerability is SQL injection in the /admin/view-appointment.php endpoint through the viewid parameter. CWE-74 indicates injection, though SQLi is typically CWE-89. The CPE specifies the exact product and version. The underlying technology: PHP and likely MySQL. risk_assessment: CVSS 4.0 base score 5.5 Medium (Low impact, network, low attack complexity, no privs needed). EPSS 0.05% suggests very unlikely to be exploited in the wild. Not in KEV. POC exists, so possible targeted attacks. The application is a niche beauty parlor management system, likely limited enterprise deployment, so real-world risk is low. SSVC: Exploitation: PoC (public), Automatable: Yes (network, low complexity), Technical Impact: Partial (low impact on confidentiality, integrity, availability). So priority might be moderate only for organizations using this specific software. Compare signals: high ease of exploitation (remote, no auth) but low impact and low prevalence reduces urgency. affected_products: "Campcodes Complete Online Beauty Parlor Management System version 1.0, as per CPE cpe:2.3:a:campcodes:complete_online_beauty_parlor_management_system:1.0. The affected file is /admin/view-appointment.php. No vendor advisory link is provided; references include VulDB entries and a GitHub issue." remediation: No official fix mentioned. Since no vendor advisory is available, suggest: "No vendor patch identified. Mitigation: Disable the affected endpoint /admin/view-appointment.php if not needed, or apply input validation to sanitize the viewid parameter. Restrict network access to the admin panel to trusted IPs. Regularly monitor for SQLi attempts." Since it's a remote unauthenticated injection, the best immediate step is to filter the parameter. Provide specific: "Apply a Web Application Firewall rule to block SQLi patterns on the viewid parameter. Note that the application is from Campcodes, possibly discontinued, so consider replacing the software if it is mission-critical." No patch available. exploit_scenario: "An attacker sends a crafted HTTP GET request to /admin/view-appointment.php?viewid=1' OR '1'='1, exploiting the SQL injection to extract database information, modify appointment records, or potentially gain further access to the underlying server if database privileges allow." exploitation_conditions: From CVSS: AV:N, AC:L, PR:N, UI:N, so no authentication required, remotely exploitable, no user interaction. So conditions: "No special conditions — remote unauthenticated exploitation against default configurations of Beauty Parlor System 1.0. The /admin/view-appointment.php endpoint is publicly accessible and does not require authentication." No limiting factors beyond maybe the admin interface might be somewhat hidden, but default is often accessible. So "unauthenticated". attack_chain: "Reconnaissance of web application → Send malicious SQL payload in viewid parameter → Backend PHP code concatenates input into SQL query → SQL query executed, data exfiltration or modification." More concisely: "Identify /admin/view-appointment.php endpoint → Inject SQL via viewid → Database executes malicious query → Extract/modify appointment data". That's 4 steps. confidence_notes: What is confirmed: Vulnerability in /admin/view-appointment.php of Campcodes Complete Online Beauty Parlor Management System 1.0, disclosed publicly via VulDB and GitHub. Exploit PoC available. Not confirmed: Active exploitation (no KEV). No vendor advisory found; patch status unknown. The CWE is given as CWE-74, but SQL injection is typically CWE-89 — possible misclassification. prevalence: The software is a niche product for beauty parlors, likely low deployment in enterprise environments. So prevalence: "low". Basis: "niche vertical application for small businesses" (max 12 words). I'll use "low" and basis "small business beauty parlor management software". assessed_cvss_vector: Given CVSS 4.0 vector already provided. But the task says: "Your OWN independent CVSS 3.1 base-metric vector ... grounded in the description and exploitation conditions — NOT a copy of any score in the input." So we need to assign a 3.1 vector. According to description: network attack vector, low complexity, no privileges (since it seems unauthenticated — the description doesn't mention auth, but CVSS 4.0 gave PR:N), no user interaction. Impact: SQL injection could lead to data leakage and data manipulation, but CVSS 4.0 gave Low for all. For 3.1, we'd have: AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N maybe? Or could be C:L/I:L/A:L? SQLi often leads to database compromise, which can affect availability too. I'll assign C:L/I:L/A:L (all low) as it's a database injection, but scope unchanged. Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L. That's a score of 7.3? Actually CVSS 3.1 with C:L/I:L/A:L and everything else low gets 7.3 (High). But original 4.0 score is 5.5. The difference is that 4.0 has separate vulnerable system impact and subsequent impact, and here it's low impact across all three. In 3.1, low impact on all three with AV:N/AC:L/PR:N/UI:N/S:U yields 7.3. That might be too high. The 4.0 vector gave VC:L/VI:L/VA:L (low). Equivalent 3.1 would be the same: C:L/I:L/A:L. So I'll use that. Rationale: "Remote, unauthenticated SQL injection with low impact to confidentiality, integrity, and availability of the database." assessed_cvss40_vector: We can use the same as provided but we'll justify: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N. That's fine. Rationale: "Attack requires only network access, no privileges; impact is limited to low on the vulnerable component." Now compile into JSON. Ensure all fields are plain text strings, no arrays. product_name: "Beauty Parlor System" summary: "SQL injection in Campcodes Beauty Parlor System 1.0 allows remote attackers to manipulate or exfiltrate appointment data via the viewid parameter in /admin/view-appointment.php. The vulnerability is remotely exploitable with no authentication, has a publicly available exploit, but EPSS predicts very low (0.05%) exploitation probability. There is no evidence of active exploitation in the wild." technical_context: "The vulnerability exists in the PHP-based Campcodes Complete Online Beauty Parlor Management System 1.0. The offending endpoint /admin/view-appointment.php fails to properly sanitize the 'viewid' input, leading to SQL injection (CWE-74, though typically categorized as CWE-89). The CPE identifies the affected application exactly, and the vulnerability is exploitable against the database back-end, likely MySQL." risk_assessment: "CVSS 4.0 base score 5.5 (Medium) with vector AV:N/AC:L/PR:N/UI:N, indicating easy remote exploitation but only low impact to confidentiality, integrity, and availability. EPSS gives a 0.05% chance of exploitation in the next 30 days, in the 15th percentile, suggesting almost negligible real-world threat. No CISA KEV entry. A public proof-of-concept (PoC) exists, enabling scripted attacks, but the product is a niche beauty parlor management system with likely minimal enterprise footprint. SSVC assessment: Exploitation (PoC), Automatable (Yes), Technical Impact (Partial). Overall, this is a low-priority issue except for organizations actively using this exact software." affected_products: "Campcodes Complete Online Beauty Parlor Management System version 1.0 (cpe:2.3:a:campcodes:
SQL injection in Online Beauty Parlor System 1.0 allows remote attackers to manipulate database queries through the /admin/search-invoices.php endpoint. The vulnerability carries a medium CVSS score, but exploit code is publicly available and no authentication is required, making it easy to attack. No active exploitation in the wild has been confirmed, and the EPSS probability remains low.
SQL injection in Campcodes Supplier Management System 1.0 allows remote attackers to manipulate the txtCategoryName parameter in /admin/add_category.php, potentially enabling unauthorized data access or modification. The vulnerability is unauthenticated and exploit code is publicly available, though no active exploitation in the wild has been confirmed. EPSS probability is low (0.05%), indicating limited real-world exploitation likelihood.
Improper authorization in Campcodes Advanced Voting Management System 1.0 allows authenticated remote attackers to manipulate the ID parameter in /admin/voters_edit.php, resulting in unauthorized modification of voter passwords. The vulnerability affects the Password Handler component and requires valid user credentials to exploit, limiting real-world risk despite public exploit availability. EPSS exploitation probability is low at 0.06 percentile, suggesting this flaw targets specific administrative scenarios rather than representing widespread attack potential.
SQL injection in Campcodes Supplier Management System 1.0 allows remote attackers to query, modify, or delete database records via the cmbAreaCode parameter in /admin/add_retailer.php. Public exploit code is available, but the vulnerability is not known to be actively exploited (CISA KEV). The EPSS exploitation probability is very low (0.05%), indicating limited real-world targeting.
SQL injection in Campcodes Advanced Online Examination System 1.0 allows remote attackers to manipulate the Username argument in /query/loginExe.php to inject malicious SQL. This can lead to unauthorized data access or modification. A public proof-of-concept is available, but EPSS indicates low exploitation probability.
SQL injection in Campcodes Supplier Management System 1.0 allows remote attackers to execute arbitrary SQL commands through the chkId[] parameter in /admin/view_unit.php. The vulnerability can be exploited without authentication to access or modify database contents. Exploit code is publicly available, but no active exploitation has been confirmed as of this analysis.
Unrestricted file upload in Campcodes Student Enrollment 1.0 allows remote attackers to upload arbitrary files via the photo parameter at the /admin/register.php endpoint. The vulnerability enables potential remote code execution by uploading malicious scripts (e.g., a PHP web shell). A publicly available exploit exists, but no active exploitation has been reported by CISA KEV.
Unrestricted file upload in campcodes Online Student Enrollment System 1.0 allows high-privileged authenticated users to upload arbitrary files via the userphoto parameter in /admin/index.php?page=user-profile, potentially enabling remote code execution or data exfiltration. Public exploit code is available, though the vulnerability's real-world impact is limited by the requirement for administrative credentials and low CVSS/EPSS scores.
Remote SQL injection in Campcodes Retro Basketball Shoes Online Store 1.0 allows unauthenticated attackers to manipulate the 'pid' argument in /admin/admin_running.php, leading to potential data exposure or modification. Exploit code is publicly available but no active exploitation has been confirmed (not in CISA KEV); the EPSS score of 0.05% indicates low probability of widespread exploitation despite the low attack complexity and no authentication requirement.
SQL injection in Campcodes Supplier Management System 1.0 allows remote unauthenticated attackers to execute arbitrary SQL commands via the txtunitDetails parameter in /admin/add_unit.php. Public exploit code is available, but EPSS indicates low exploitation probability (0.05%) and it is not listed in CISA KEV.
SQL injection in Campcodes Supplier Management System 1.0 allows remote attackers to manipulate database queries via the `txtDistributorAddress` parameter in `/admin/add_distributor.php`. Public exploit code is available, though the EPSS score indicates a very low probability of widespread exploitation.
Unrestricted file upload in Campcodes Retro Basketball Shoes Online Store 1.0 allows authenticated administrators to upload malicious files via the product_image parameter of /admin/admin_running.php. This can be exploited for remote code execution, and a public exploit is available. EPSS indicates very low exploitation probability (0.06%), and no active exploitation has been confirmed.
SQL injection in Campcodes School File Management System 1.0 allows unauthenticated remote attackers to inject SQL via the stud_id parameter in /update_query.php. Exploit code is publicly available, but the EPSS exploitation probability is very low (0.04%) and the CISA KEV catalog does not list it. The vulnerability has a CVSS 4.0 score of 5.5 (Medium), reflecting limited impact on confidentiality, integrity, and availability.
A vulnerability has been found in Campcodes Online Polling System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A flaw has been found in Campcodes Online Polling System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was detected in Campcodes School File Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A security vulnerability has been detected in Campcodes Supplier Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was identified in Campcodes Complete Online Beauty Parlor Management System 1.0. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability has been found in Campcodes Supplier Management System 1.0. Rated medium severity (CVSS 5.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
A flaw has been found in Campcodes Retro Basketball Shoes Online Store 1.0. Rated medium severity (CVSS 5.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
Campcodes Online Hospital Management System 1.0 is vulnerable to SQL Injection in /admin/index.php via the parameter username. Rated high severity (CVSS 7.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was determined in Campcodes Retro Basketball Shoes Online Store 1.0. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was found in Campcodes Retro Basketball Shoes Online Store 1.0. Rated medium severity (CVSS 5.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability has been found in Campcodes Retro Basketball Shoes Online Store 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was found in Campcodes Supplier Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A weakness has been identified in Campcodes School Fees Payment Management System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
A security flaw has been discovered in Campcodes School Fees Payment Management System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was identified in Campcodes School Fees Payment Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was determined in Campcodes School Fees Payment Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was found in Campcodes School Fees Payment Management System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability has been found in Campcodes School Fees Payment Management System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability has been found in Campcodes Supplier Management System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
A flaw has been found in Campcodes Supplier Management System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was identified in Campcodes School Fees Payment Management System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
A security flaw has been discovered in Campcodes School File Management 1.0. Rated medium severity (CVSS 5.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
A security flaw has been discovered in Campcodes School Fees Payment Management System 1.0.php?action=delete_course. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
SQL injection in Campcodes Retro Basketball Shoes Online Store 1.0 exposes the `/admin/admin_football.php` endpoint to database manipulation via the unsanitized `pid` parameter, achievable by remote unauthenticated attackers per the CVSS 4.0 PR:N rating. The flaw enables limited read, write, and availability impact against the backend database. A public proof-of-concept exploit has been disclosed via GitHub, though EPSS remains extremely low at 0.03% (8th percentile), consistent with this product's negligible real-world deployment footprint and no CISA KEV listing.
SQL injection in Campcodes Retro Basketball Shoes Online Store 1.0 exposes the `/admin/admin_product.php` endpoint to remote attackers who can manipulate the `pid` parameter to execute arbitrary SQL queries against the backend database. Publicly available exploit code exists (GitHub CVE issue #16), though the EPSS score of 0.01% at the 1st percentile signals negligible observed exploitation probability - consistent with a niche, low-footprint hobbyist application. This vulnerability is not listed in the CISA Known Exploited Vulnerabilities catalog.
SQL injection in Campcodes Retro Basketball Shoes Online Store 1.0 exposes the admin panel endpoint /admin/admin_feature.php to database manipulation via the unsanitized `pid` parameter. The provided CVSS 4.0 vector asserts PR:N (no privileges required), though the /admin/ path suggests authentication may be in play - this discrepancy is noted and should be verified against the actual application. A publicly available proof-of-concept exploit exists on GitHub, though the EPSS score of 0.01% (1st percentile) indicates real-world exploitation attempts remain negligible, consistent with the product's obscure deployment footprint. No vendor-released patch has been identified at time of analysis.
SQL injection in Campcodes Retro Basketball Shoes Online Store 1.0 exposes the admin login endpoint to remote, unauthenticated database manipulation via the Username parameter in /admin/admin_index.php. The CVSS 4.0 vector (AV:N/AC:L/PR:N/UI:N) confirms exploitation requires no authentication and minimal skill, and a public proof-of-concept exists on GitHub. Despite this, real-world risk is curtailed by the product's extremely niche deployment footprint, an EPSS of just 0.01% (1st percentile), and absence from CISA KEV - making mass exploitation implausible.
SQL injection in Campcodes Online Beauty Parlor Management System 1.0 allows high-privileged attackers to manipulate the searchdata parameter in /admin/search-appointment.php, enabling arbitrary database queries with limited confidentiality and integrity impact. The vulnerability requires administrative privileges to exploit and has a publicly disclosed proof-of-concept, though real-world exploitation risk is minimal given the EPSS score of 0.01% and the requirement for high-privilege access.
SQL injection in Campcodes Online Beauty Parlor Management System 1.0 allows authenticated high-privilege administrators to execute arbitrary SQL queries via the sername parameter in /admin/manage-services.php. The vulnerability requires high administrative privileges and has publicly available exploit code, though real-world impact is limited by its requirement for already-compromised admin accounts with no lateral movement or privilege escalation capability.
SQL injection vulnerability in Campcodes Online Apartment Visitor Management System 1.0 allows remote unauthenticated attackers to perform low-impact database manipulation via the /forgot-password.php email parameter. Public exploit code is available, though no active exploitation has been reported (not listed in CISA KEV), and EPSS signals very low real-world exploitation
SQL injection in Campcodes Online Apartment Visitor Management System 1.0 allows high-privileged remote attackers to manipulate the mobilenumber parameter in /admin-profile.php, potentially leading to unauthorized database access or modification. The vulnerability requires administrative privileges to exploit and has limited confidentiality and integrity impact; public exploit code is available but real-world exploitation risk remains low due to EPSS score of 0.03% and the administrative access prerequisite.
SQL injection in Campcodes Online Learning Management System 1.0 allows remote unauthenticated attackers to manipulate database queries via the date_start parameter in /admin/calendar_of_events.php. Publicly available exploit code exists, increasing risk, though the EPSS score is low (0.03%) suggesting limited active exploitation. No patch has been identified at time of analysis.
We need to produce a JSON object with all the fields as specified. Use all the data from the multi-source intelligence. Note the assigned CVSS is CVSS:4.0, not 3.1. There's also a CVSS score 5.5 but it's 4.0 vector. We must synthesize, not just paraphrase. The description: Campcodes Advanced Online Voting Management System 1.0, file /admin/login.php, unknown function, username argument leads to SQL injection, remote, exploit disclosed. We have EPSS 0.03%, low. POC publicly available. No KEV mentioned. CPE: campcodes:advanced_online_voting_system:1.0. CWE-74 (Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') but likely SQL injection is CWE-89; they gave CWE-74 which is a parent. Could mention that. The references: GitHub with exploit (vul/issues/5), vuldb links, campcodes.com. CVSS:4.0 vector: AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P. So unauthenticated, network, low complexity, no user interaction, low impact on all three (Confidentiality, Integrity, Availability), but scope is none so only vulnerable system. Exploit maturity is Proof-of-Concept (E:P). So overall base score 5.5, which is medium. The 4.0 score is 5.5 (Base). In our assessed CVSS vectors, we'll need to give both 3.1 and 4.0. We must not just copy; we need to provide our own independent assessment grounded in description. Since the description is a typical SQLi with username parameter, remote, unauthenticated (likely /admin/login.php is login page, so no authentication required to send request), low complexity, but impact? SQL injection can lead to data leakage (confidentiality), maybe data modification (integrity) but might be limited. Possibly could lead to admin access depending on SQL. The CVSS 4.0 they gave says low impact on C/I/A, no scope change. That's plausible for a login page SQLi where you can bypass authentication and maybe extract data. I'd assess similar: CVSS 3.1: maybe AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L. That's ba
Unrestricted file upload in Campcodes Advanced Online Voting System 1.0 allows authenticated attackers to upload arbitrary files via manipulation of the photo parameter in /admin/voters_add.php. The vulnerability requires valid login credentials (PR:L) but affects confidentiality, integrity, and availability with low severity. Publicly available exploit code exists; however, EPSS score of 0.04% indicates minimal real-world exploitation probability despite public POC availability.
SQL injection in Campcodes Advanced Online Voting System 1.0 allows authenticated remote attackers to manipulate the firstname parameter in /admin/voters_add.php, leading to limited confidentiality and integrity impact. The vulnerability requires valid user credentials (PR:L) and has a publicly available exploit, but EPSS scoring (0.03%, percentile 8%) suggests low real-world exploitation probability despite public POC availability.
SQL injection in Campcodes Advanced Online Voting Management System 1.0 allows authenticated remote attackers to manipulate the voter parameter in /index.php, potentially leading to unauthorized data access or modification. The vulnerability has a low CVSS score (2.1) due to authentication requirements and limited confidentiality impact, but publicly available exploit code exists and exploitation probability is rated at 8th percentile by EPSS, suggesting this remains a lower-priority issue despite public POC availability.
SQL injection in Campcodes Online Apartment Visitor Management System 1.0 allows remote attackers to execute arbitrary SQL queries via the fromdate or todate parameters in /bwdates-reports-details.php. A public proof-of-concept exploit is available, but no active exploitation has been confirmed. This could lead to unauthorized data access or manipulation.
SQL injection in Campcodes Online Apartment Visitor Management System 1.0 allows remote unauthenticated attackers to manipulate the search-visitor.php endpoint via the searchdata parameter. Public exploit code exists, though EPSS probability is low (0.03%), indicating limited exploitation interest. No active exploitation confirmed in CISA KEV.
SQL injection in Campcodes Visitor Management 1.0 allows remote attackers to manipulate database queries via the Username parameter on /index.php. Exploit code is publicly available, but the vulnerability is not known to be actively exploited. EPSS score of 0.03% suggests very low likelihood of widespread exploitation.
SQL injection in Campcodes Online Apartment Visitor Management System 1.0 allows remote unauthenticated attackers to inject SQL via the 'editid' parameter in /visitor-detail.php, potentially exfiltrating or modifying database information. Public exploit code is available, but EPSS score of 0.03% indicates low likelihood of exploitation.
A weakness has been identified in Campcodes Advanced Online Voting Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A security flaw has been discovered in Campcodes Online Learning Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was identified in Campcodes Computer Sales and Inventory System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A weakness has been identified in Campcodes Online Learning Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A security flaw has been discovered in Campcodes Farm Management System 1.0. Rated medium severity (CVSS 5.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was determined in Campcodes Online Learning Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was found in Campcodes Online Learning Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability has been found in Campcodes Online Learning Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A security flaw has been discovered in Campcodes Online Learning Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was identified in Campcodes Online Learning Management System 1.0.php. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was determined in Campcodes Online Learning Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was found in Campcodes Online Learning Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A security vulnerability has been detected in Campcodes Computer Sales and Inventory System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A security flaw has been discovered in Campcodes Point of Sale System POS 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A security flaw has been discovered in Campcodes Gym Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was identified in Campcodes Society Membership Information System 1.0.php. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability has been found in Campcodes Computer Sales and Inventory System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A flaw has been found in Campcodes Computer Sales and Inventory System 1.0.php. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was detected in Campcodes Computer Sales and Inventory System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A security flaw has been discovered in Campcodes Online Beauty Parlor Management System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was identified in Campcodes Online Beauty Parlor Management System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
A weakness has been identified in Campcodes Online Learning Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was detected in Campcodes Online Learning Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A security vulnerability has been detected in Campcodes Online Learning Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A weakness has been identified in Campcodes Farm Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A security flaw has been discovered in Campcodes Online Beauty Parlor Management System 1.0.php. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was identified in Campcodes Online Beauty Parlor Management System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.