CVE-2025-13259

MediumCVSS 6.3

Published: 17/11/2025(UTC)Updated: 07/10/2026(UTC)Translated: 08/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.31%

22th percentile - higher than 22% of all known CVEs

Summary

A SQL injection vulnerability has been found in Campcodes Supplier Management System 1.0 in the file /manufacturer/edit_unit.php. Manipulation of the ID argument causes SQL injection. The attack may be initiated remotely, and the exploit has been published.

Risk Assessment

The vulnerability allows a remote attacker to execute unauthorized SQL queries, potentially leading to data breaches. The public exploit increases the risk of exploitation.

Recommendation

Update the system as soon as possible and apply patches. Also use parameterized SQL queries and restrict access to the /manufacturer/edit_unit.php file.

Other vulnerabilities in Campcodes Supplier Management System

CVE-2025-13260Medium
A SQL injection vulnerability has been found in Campcodes Supplier Management System 1.0 in the file /manufacturer/edit_product.php. Manipulation of the cmbProductUnit argument leads to SQL injection. The attack may be launched remotely, and the exploit has been disclosed.

Original NVD description (English source)

A flaw has been found in Campcodes Supplier Management System 1.0. This affects an unknown function of the file /manufacturer/edit_unit.php. This manipulation of the argument ID causes sql injection. The attack may be initiated remotely. The exploit has been published and may be used.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS