CVE-2026-0597
MediumCVSS 6.3Exploitation Probability (EPSS)
Low risk25th percentile - higher than 25% of all known CVEs
Summary
In Campcodes Supplier Management System 1.0, manipulation of the txtRetailerAddress argument in /retailer/edit_profile.php leads to SQL injection. The vulnerability can be exploited remotely and a public exploit has been released.
Risk Assessment
A remote attacker can exploit the SQL injection to manipulate data or gain unauthorized database access, and the publicly available exploit increases the risk.
Recommendation
Restrict access to the application, enforce input validation and parameterized SQL queries, and consider updating or replacing the vulnerable component.
Other vulnerabilities in Campcodes Supplier Management System
See all- CVE-2025-13424Medium
A vulnerability was found in Campcodes Supplier Management System 1.0 in /admin/add_product.php. Manipulating the txtProductName argument leads to SQL injection, and remote exploitation is possible. The exploit has been publicly disclosed and may be used.
- CVE-2025-13260Medium
A SQL injection vulnerability has been found in Campcodes Supplier Management System 1.0 in the file /manufacturer/edit_product.php. Manipulation of the cmbProductUnit argument leads to SQL injection. The attack may be launched remotely, and the exploit has been disclosed.
- CVE-2025-13259Medium
A SQL injection vulnerability has been found in Campcodes Supplier Management System 1.0 in the file /manufacturer/edit_unit.php. Manipulation of the ID argument causes SQL injection. The attack may be initiated remotely, and the exploit has been published.
Original NVD description (English source)
A flaw has been found in Campcodes Supplier Management System 1.0. Affected by this issue is some unknown functionality of the file /retailer/edit_profile.php. This manipulation of the argument txtRetailerAddress causes sql injection. Remote exploitation of the attack is possible. The exploit has been published and may be used.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS