CVE-2025-10786

Publication date

2025-09-22 06:32:07

Family

VulDB

State

PUBLISHED

Description

A flaw has been found in Campcodes Grocery Sales and Inventory System 1.0. This vulnerability affects unknown code of the file /ajax.php?action=delete_user. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been published and may be used.