CVE-2025-14664

A vulnerability was identified in Campcodes Supplier Management System 1.0. This issue affects some unknown processing of the file /admin/view_unit.php. The manipulation of the argument chkId[] leads to sql injection. Remote exploitation of the attack is possible. The exploit is publicly available and might be used.

Score

CVSS 3.1 9.8 Critical

Status

Analyzed - cna@vuldb.com

Published

2025-12-14

Last modified

2026-02-24

Weaknesses

CWE-74, CWE-89

Affected products

• Supplier Management System (Campcodes)

References

• https://github.com/louxiadelaolitou/CVE/issues/3
• https://vuldb.com/?ctiid.336396
• https://vuldb.com/?id.336396
• https://vuldb.com/?submit.714163
• https://www.campcodes.com/