Approved changes feed: RSS · Atom

cpe:2.3:a:campcodes:grocery_sales_and_inventory_system:1.0:*:*:*:*:*:*:*

part: a version: 1.0 update: *

VendorCampcodes (0cbc38b8-6075-5b10-9920-3b1d3efa5f42)
ProductGrocery Sales And Inventory System (ab4b0a0f-e2a5-552f-9aa3-6701ada18935)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-10786 vulnerable 2026-06-08 07:02:27.509821 Campcodes Grocery Sales and Inventory System ajax.php sql injection
HIGH (7.3)
A flaw has been found in Campcodes Grocery Sales and Inventory System 1.0. This vulnerability affects unknown code of the file /ajax.php?action=delete_user. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been published and may be used.
Published: 2025-09-22T06:32:07.319Z
Updated: 2025-09-22T13:49:18.408Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-10785 vulnerable 2026-06-08 07:02:27.509450 Campcodes Grocery Sales and Inventory System manage_user.php sql injection
HIGH (7.3)
A vulnerability was detected in Campcodes Grocery Sales and Inventory System 1.0. This affects an unknown part of the file /manage_user.php. The manipulation of the argument ID results in sql injection. It is possible to launch the attack remotely. The exploit is now public and may be used.
Published: 2025-09-22T06:02:06.171Z
Updated: 2025-09-22T13:50:08.968Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-10566 vulnerable 2026-06-08 07:02:27.080132 Campcodes Grocery Sales and Inventory System index.php cross site scripting
MEDIUM (4.3)
A vulnerability was identified in Campcodes Grocery Sales and Inventory System 1.0. Affected by this issue is some unknown functionality of the file /index.php?page=users. The manipulation of the argument page leads to cross site scripting. It is possible to initiate the attack remotely. The exploit is publicly available and might be used.
Published: 2025-09-16T21:32:07.065Z
Updated: 2025-09-17T13:40:38.983Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-10565 vulnerable 2026-06-08 07:02:27.079596 Campcodes Grocery Sales and Inventory System ajax.php sql injection
HIGH (7.3)
A vulnerability was determined in Campcodes Grocery Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /ajax.php?action=delete_receiving. Executing manipulation of the argument ID can lead to sql injection. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized.
Published: 2025-09-16T20:32:09.802Z
Updated: 2025-09-17T13:48:28.408Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-10564 vulnerable 2026-06-08 07:02:27.079077 Campcodes Grocery Sales and Inventory System ajax.php sql injection
HIGH (7.3)
A vulnerability was found in Campcodes Grocery Sales and Inventory System 1.0. Affected is an unknown function of the file /ajax.php?action=delete_category. Performing manipulation of the argument ID results in sql injection. The attack is possible to be carried out remotely. The exploit has been made public and could be used.
Published: 2025-09-16T20:32:07.007Z
Updated: 2025-09-17T13:56:26.602Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-10563 vulnerable 2026-06-08 07:02:27.078541 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-10562 vulnerable 2026-06-08 07:02:27.078109 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-10417 vulnerable 2026-06-08 07:02:26.828831 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-10416 vulnerable 2026-06-08 07:02:26.828364 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-10415 vulnerable 2026-06-08 07:02:26.827992 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-10414 vulnerable 2026-06-08 07:02:26.827608 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-10413 vulnerable 2026-06-08 07:02:26.827006 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-10032 vulnerable 2026-06-08 07:02:26.184378 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-10031 vulnerable 2026-06-08 07:02:26.183531 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-10030 vulnerable 2026-06-08 07:02:26.182572 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.