CVE-2025-14952
📋 TL;DR
Campcodes Supplier Management System 1.0 contains a SQL injection vulnerability in the /admin/add_category.php file via the txtCategoryName parameter. This allows remote attackers to execute arbitrary SQL commands on the database. All installations of version 1.0 are affected.
💻 Affected Systems
- Campcodes Supplier Management System
📦 What is this software?
⚠️ Risk & Real-World Impact
Worst Case
Complete database compromise including data theft, data manipulation, and potential remote code execution if database permissions allow.
Likely Case
Database information disclosure, authentication bypass, and privilege escalation within the application.
If Mitigated
Limited impact if proper input validation and parameterized queries are implemented.
🎯 Exploit Status
Exploit requires admin access to reach /admin/add_category.php endpoint. SQL injection is straightforward once authenticated.
🛠️ Fix & Mitigation
✅ Official Fix
Patch Version: Unknown
Vendor Advisory: https://www.campcodes.com/
Restart Required: No
Instructions:
No official patch available. Consider implementing parameterized queries in add_category.php and proper input validation for txtCategoryName parameter.
🔧 Temporary Workarounds
Input Validation Filter
allAdd input validation to filter SQL injection patterns in txtCategoryName parameter
Modify /admin/add_category.php to include: $categoryName = mysqli_real_escape_string($conn, $_POST['txtCategoryName']);
Web Application Firewall
allDeploy WAF with SQL injection protection rules
🧯 If You Can't Patch
- Restrict access to /admin/ directory to trusted IP addresses only
- Disable or remove the add_category.php file if category management is not required
🔍 How to Verify
Check if Vulnerable:
Test the txtCategoryName parameter with SQL injection payloads like ' OR '1'='1Check Version:
Check application version in admin panel or readme filesVerify Fix Applied:
Verify that SQL injection payloads no longer execute and return error messages📡 Detection & Monitoring
Log Indicators:
- Unusual SQL queries in database logs
- Multiple failed login attempts followed by admin access
Network Indicators:
- POST requests to /admin/add_category.php with SQL keywords in parameters
SIEM Query:
source="web_logs" AND uri="/admin/add_category.php" AND (param="txtCategoryName" AND value CONTAINS "UNION" OR value CONTAINS "SELECT" OR value CONTAINS "OR '1'='1")