A weakness has been identified in Campcodes Grocery Sales and Inventory System 1.0. This issue affects some unknown processing of the file /ajax.php?action=save_receiving. Executing manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit has been made available to the public and could be exploited.
References
| Link | Resource |
|---|---|
| https://github.com/zzb1388/cve/issues/72 | Exploit Third Party Advisory |
| https://vuldb.com/?ctiid.322745 | Permissions Required VDB Entry |
| https://vuldb.com/?id.322745 | Third Party Advisory VDB Entry |
| https://vuldb.com/?submit.643950 | Third Party Advisory VDB Entry |
| https://www.campcodes.com/ | Product |
| https://github.com/zzb1388/cve/issues/72 | Exploit Third Party Advisory |
Configurations
History
10 Sep 2025, 18:15
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:campcodes:grocery_sales_and_inventory_system:1.0:*:*:*:*:*:*:* | |
| First Time |
Campcodes
Campcodes grocery Sales And Inventory System |
|
| References | () https://github.com/zzb1388/cve/issues/72 - Exploit, Third Party Advisory | |
| References | () https://vuldb.com/?ctiid.322745 - Permissions Required, VDB Entry | |
| References | () https://vuldb.com/?id.322745 - Third Party Advisory, VDB Entry | |
| References | () https://vuldb.com/?submit.643950 - Third Party Advisory, VDB Entry | |
| References | () https://www.campcodes.com/ - Product |
08 Sep 2025, 15:15
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/zzb1388/cve/issues/72 - |
06 Sep 2025, 11:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-09-06 11:15
Updated : 2025-09-10 18:15
NVD link : CVE-2025-10030
Mitre link : CVE-2025-10030
CVE.ORG link : CVE-2025-10030
JSON object : View
Products Affected
campcodes
- grocery_sales_and_inventory_system