CVE-2025-10562

Publication date

2025-09-16 19:02:06

Family

VulDB

State

PUBLISHED

Description

A flaw has been found in Campcodes Grocery Sales and Inventory System 1.0. This affects an unknown function of the file /ajax.php?action=save_product. This manipulation of the argument ID causes sql injection. Remote exploitation of the attack is possible. The exploit has been published and may be used.