CVE-2025-11109

CRITICAL 9.8CVE-2025-11109 · Published 28/09/2025 · updated 09/10/2026

In short

CVE-2025-11109 is a CRITICAL (CVSS 9.8) vulnerability affecting computer sales and inventory system (campcodes).
Chance of exploitation in the next 30 days (EPSS): 0.50%, higher than 42.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
computer sales and inventory system campcodes	`= 1.0`	No fix yet

Description

A vulnerability was identified in Campcodes Computer Sales and Inventory System 1.0. The affected element is an unknown function of the file /pages/us_edit.php?action=edit. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit is publicly available and might be used.

References

DrNbnonono/CVE · Exploit
vuldb.com · Permissions Required
vuldb.com · Third Party Advisory
vuldb.com · Third Party Advisory
campcodes.com · Product

More vulnerabilities in computer sales and inventory system

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

computer sales and inventory system

campcodes

= 1.0

No fix yet

Description

More vulnerabilities in computer sales and inventory system

See all →