← CVE Tracker
7.3HIGH

CVE-2025-11109 — A vulnerability was identified in Campcodes Computer Sales and Inventory System 1.0.

Campcodes · Computer Sales And Inventory System · Published 28 Sept 2025 · Modified 30 Sept 2026

Description

A vulnerability was identified in Campcodes Computer Sales and Inventory System 1.0. The affected element is an unknown function of the file /pages/us_edit.php?action=edit. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit is publicly available and might be used.

References

What to do
  1. Check whether Computer Sales And Inventory System is in your asset inventory.
  2. Patch in the next maintenance window; prioritise internet-facing systems.
  3. Record the decision in your risk register for audit evidence.
Alert me on similar CVEs →
Share

Link: adminadda.com/cve/CVE-2025-11109