CVE-2025-5079

CRITICAL 9.8CVE-2025-5079 · Published 22/05/2025 · updated 17/06/2026

Package	Affected versions	Patched versions
online shopping portal campcodes	`= 1.0`	No fix yet
online shopping portal phpgurukul	`= 1.0`	No fix yet

Description

A flaw has been found in PHPGurukul/Campcodes Online Shopping Portal 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/updateorder.php. Executing manipulation of the argument remark can lead to sql injection. The attack may be performed from remote. The exploit has been published and may be used.

References

dico-Z/CVE · Exploit
vuldb.com · Permissions Required
vuldb.com · Third Party Advisory
vuldb.com · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free