Campcodes Supplier Management System vulnerabilities

A vulnerability was found in Campcodes Supplier Management System 1.0 in /admin/add_product.php. Manipulating the txtProductName argument leads to SQL injection, and remote exploitation is possible. The exploit has been publicly disclosed and may be used.

A SQL injection vulnerability has been found in Campcodes Supplier Management System 1.0 in the file /manufacturer/edit_product.php. Manipulation of the cmbProductUnit argument leads to SQL injection. The attack may be launched remotely, and the exploit has been disclosed.

A SQL injection vulnerability has been found in Campcodes Supplier Management System 1.0 in the file /manufacturer/edit_unit.php. Manipulation of the ID argument causes SQL injection. The attack may be initiated remotely, and the exploit has been published.