← Database

CVE-2025-14514

HIGH CVSS: 7.3 Published: 2025-12-11 Modified: 2026-06-17

Description

A flaw has been found in Campcodes Supplier Management System 1.0. Affected is an unknown function of the file /admin/add_distributor.php. This manipulation of the argument txtDistributorAddress causes sql injection. The attack can be initiated remotely. The exploit has been published and may be used.

Affected Platforms

Campcodes Supplier Management System

Weakness Type

CWE-74, CWE-89, CWE-89

References