CVE-2025-13291

Publication date

2025-11-17 17:02:07

Family

VulDB

State

PUBLISHED

Description

A vulnerability was found in Campcodes Supplier Management System 1.0. This affects an unknown part of the file /manufacturer/confirm_order.php. Performing manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The exploit has been made public and could be used.