EXPOSURES › CVE-2025-13291
CVE-2025-13291
HIGH
DETAIL
SourceNVD · cve
Published2025-11-17
CVSS7.3
Referencehttps://nvd.nist.gov/vuln/detail/CVE-2025-13291 ↗
▸ RECOMMENDED ACTION Patch the affected products and confirm your instances are covered.
PLAYERS IMPLICATED
DESCRIPTION
A vulnerability was found in Campcodes Supplier Management System 1.0. This affects an unknown part of the file /manufacturer/confirm_order.php. Performing a manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The exploit has been made public and could be used.
AFFECTED FEDRAMP PRODUCTS · 0
No correlated FedRAMP products.