CampCodes vulnerabilities
We track 422 vulnerabilities in CampCodes products across 60+ products. 422 are rated high or critical, and none are known to be exploited. The most recent was published on November 5, 2026.
Latest CampCodes vulnerabilities
- 7.3 High severity
Complete Sales and Inventory System with…: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability was found in Campcodes Complete Sales and Inventory System with Credit Management 1.0. This issue affects some unknown processing of the file /ahira/login.php. Performing a manipulation of the argument branch results in sql injection. The attac
- 7.3 High severity
Division Regional Athletic Meet Game Result…: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability was identified in Campcodes Division Regional Athletic Meet Game Result Matrix System up to 2.1. This affects an unknown function of the file /dipam/check-user.php. Such manipulation of the argument abbr leads to sql injection. It is possible t
- 7.3 High severity
Complete Advance Loan Management System: Improper Access Control
A security vulnerability has been detected in Campcodes Complete Advance Loan Management System 1.0. This affects the function move_uploaded_file of the file /loan/application/banner.php. Such manipulation of the argument image leads to unrestricted upload. Th
- 9.8 Critical severity
Supplier Management System: Improper Neutralization of Special Elements used in an SQL Command
A flaw has been found in Campcodes Supplier Management System 1.0. Affected by this issue is some unknown functionality of the file /retailer/edit_profile.php. This manipulation of the argument txtRetailerAddress causes sql injection. Remote exploitation of th
- 8.8 High severity
School File Management System: Unrestricted Upload of File with Dangerous Type
A security vulnerability has been detected in campcodes School File Management System 1.0. The affected element is an unknown function of the file /save_file.php. The manipulation of the argument File leads to unrestricted upload. The attack may be initiated r
- 9.8 Critical severity
Supplier Management System: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability has been found in Campcodes Supplier Management System 1.0. Affected is an unknown function of the file /admin/view_products.php. The manipulation of the argument chkId[] leads to sql injection. It is possible to initiate the attack remotely. T
- 9.8 Critical severity
Supplier Management System: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A flaw has been found in Campcodes Supplier Management System 1.0. This impacts an unknown function of the file /admin/add_area.php. Executing a manipulation of the argument txtAreaCode can lead to sql injection. The attack may be performed from remote. The ex
- 9.8 Critical severity
Complete Online Beauty Parlor Management System: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A security flaw has been discovered in Campcodes Complete Online Beauty Parlor Management System 1.0. Impacted is an unknown function of the file /admin/view-appointment.php. Performing a manipulation of the argument viewid results in sql injection. The attack
- 9.8 Critical severity
Complete Online Beauty Parlor Management System: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability was identified in Campcodes Complete Online Beauty Parlor Management System 1.0. This issue affects some unknown processing of the file /admin/search-invoices.php. Such manipulation leads to sql injection. The attack can be launched remotely. T
- 9.8 Critical severity
Supplier Management System: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability was detected in Campcodes Supplier Management System 1.0. This affects an unknown function of the file /admin/add_category.php. Performing a manipulation of the argument txtCategoryName results in sql injection. The attack is possible to be car
- 9.8 Critical severity
Supplier Management System: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability was identified in Campcodes Supplier Management System 1.0. This affects an unknown function of the file /admin/add_retailer.php. The manipulation of the argument cmbAreaCode leads to sql injection. The attack is possible to be carried out remo
- 9.8 Critical severity
Advanced Online Examination System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was detected in campcodes Advanced Online Examination System 1.0. This affects an unknown function of the file /query/loginExe.php. Performing a manipulation of the argument Username results in sql injection. It is possible to initiate the atta
- 9.8 Critical severity
Supplier Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was identified in Campcodes Supplier Management System 1.0. This issue affects some unknown processing of the file /admin/view_unit.php. The manipulation of the argument chkId[] leads to sql injection. Remote exploitation of the attack is possi
- 9.8 Critical severity
Online Student Enrollment System: Unrestricted Upload of File with Dangerous Type
A flaw has been found in campcodes Online Student Enrollment System 1.0. This impacts an unknown function of the file /admin/register.php. Executing a manipulation of the argument photo can lead to unrestricted upload. The attack can be launched remotely. The
- 7.2 High severity
Online Student Enrollment System: Unrestricted Upload of File with Dangerous Type
A vulnerability was detected in campcodes Online Student Enrollment System 1.0. This affects an unknown function of the file /admin/index.php?page=user-profile. Performing a manipulation of the argument userphoto results in unrestricted upload. The attack can
- 9.8 Critical severity
Retro Basketball Shoes Online Store: Improper Neutralization of Special Elements used in an SQL Command
A flaw has been found in Campcodes Retro Basketball Shoes Online Store 1.0. The affected element is an unknown function of the file /admin/admin_running.php. This manipulation of the argument pid causes sql injection. It is possible to initiate the attack remo
- 9.8 Critical severity
Supplier Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in Campcodes Supplier Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/add_unit.php. Such manipulation of the argument txtunitDetails leads to sql injection. The attack can be l
- 9.8 Critical severity
Supplier Management System: Improper Neutralization of Special Elements used in an SQL Command
A flaw has been found in Campcodes Supplier Management System 1.0. Affected is an unknown function of the file /admin/add_distributor.php. This manipulation of the argument txtDistributorAddress causes sql injection. The attack can be initiated remotely. The e
- 7.2 High severity
Retro Basketball Shoes Online Store: Improper Access Control
A weakness has been identified in Campcodes Retro Basketball Shoes Online Store 1.0. The impacted element is an unknown function of the file /admin/admin_running.php. Executing a manipulation of the argument product_image can lead to unrestricted upload. It is
- 9.8 Critical severity
School File Management System: Improper Neutralization of Special Elements used in an SQL Command
A weakness has been identified in Campcodes School File Management System 1.0. This impacts an unknown function of the file /update_query.php. This manipulation of the argument stud_id causes sql injection. The attack can be initiated remotely. The exploit has
- 9.8 Critical severity
Online Polling System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in Campcodes Online Polling System 1.0. Affected by this issue is some unknown functionality of the file /registeracc.php. The manipulation of the argument email leads to sql injection. The attack may be initiated remotely. The e
- 9.8 Critical severity
Online Polling System: Improper Neutralization of Special Elements used in an SQL Command
A flaw has been found in Campcodes Online Polling System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/checklogin.php. Executing a manipulation of the argument myusername can lead to sql injection. The attack can be launche
- 9.8 Critical severity
School File Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was detected in Campcodes School File Management System 1.0. Affected is an unknown function of the file /index.php of the component Login. Performing a manipulation of the argument stud_no results in sql injection. The attack can be initiated
- 9.8 Critical severity
Supplier Management System: Improper Neutralization of Special Elements used in an SQL Command
A security vulnerability has been detected in Campcodes Supplier Management System 1.0. This impacts an unknown function of the file /index.php of the component Login. Such manipulation of the argument txtUsername leads to sql injection. It is possible to laun
- 9.8 Critical severity
Supplier Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in Campcodes Supplier Management System 1.0. This affects an unknown function of the file /admin/add_product.php. The manipulation of the argument txtProductName leads to sql injection. Remote exploitation of the attack is possib
- 7.2 High severity
Retro Basketball Shoes Online Store: Unrestricted Upload of File with Dangerous Type
A flaw has been found in Campcodes Retro Basketball Shoes Online Store 1.0. The impacted element is an unknown function of the file /admin/admin_product.php. Executing a manipulation of the argument product_image can lead to unrestricted upload. The attack may
- 9.8 Critical severity
Retro Basketball Shoes Online Store: Unrestricted Upload of File with Dangerous Type
A vulnerability was found in Campcodes Retro Basketball Shoes Online Store 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/admin_football.php. Performing a manipulation of the argument product_image results in unrestricted up
- 9.8 Critical severity
Retro Basketball Shoes Online Store: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in Campcodes Retro Basketball Shoes Online Store 1.0. Affected is an unknown function of the file /admin/receipt.php. Such manipulation of the argument tid leads to sql injection. The attack can be executed remotely. The exploit
- 9.8 Critical severity
Supplier Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in Campcodes Supplier Management System 1.0. This affects an unknown part of the file /manufacturer/confirm_order.php. Performing a manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The ex
- 8.8 High severity
School Fees Payment Management System: Improper Neutralization of Special Elements used in an SQL Command
A weakness has been identified in Campcodes School Fees Payment Management System 1.0. Affected by this issue is some unknown functionality of the file /ajax.php?action=delete_fees. Executing a manipulation of the argument ID can lead to sql injection. The att
- 8.8 High severity
School Fees Payment Management System: Improper Neutralization of Special Elements used in an SQL Command
A security flaw has been discovered in Campcodes School Fees Payment Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /ajax.php?action=delete_payment. Performing a manipulation of the argument ID results in sql inje
- 9.8 Critical severity
School Fees Payment Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was identified in Campcodes School Fees Payment Management System 1.0. Affected is an unknown function of the file /manage_course.php. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit
- 9.8 Critical severity
School Fees Payment Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was determined in Campcodes School Fees Payment Management System 1.0. This impacts an unknown function of the file /ajax.php?action=login. This manipulation of the argument Username causes sql injection. Remote exploitation of the attack is po
- 8.8 High severity
School Fees Payment Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in Campcodes School Fees Payment Management System 1.0. This affects an unknown function of the file /ajax.php?action=save_course. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The
- 8.8 High severity
School Fees Payment Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in Campcodes School Fees Payment Management System 1.0. The impacted element is an unknown function of the file /ajax.php?action=save_payment. The manipulation of the argument ID leads to sql injection. The attack may be initiate
- 8.8 High severity
Supplier Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in Campcodes Supplier Management System 1.0. This impacts an unknown function of the file /manufacturer/edit_product.php. Such manipulation of the argument cmbProductUnit leads to sql injection. The attack may be launched remotel
- 8.8 High severity
Supplier Management System: Improper Neutralization of Special Elements used in an SQL Command
A flaw has been found in Campcodes Supplier Management System 1.0. This affects an unknown function of the file /manufacturer/edit_unit.php. This manipulation of the argument ID causes sql injection. The attack may be initiated remotely. The exploit has been p
- 9.8 Critical severity
School Fees Payment Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was identified in Campcodes School Fees Payment Management System 1.0. Impacted is an unknown function of the file /ajax.php?action=save_student. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely.
- 9.8 Critical severity
School File Management: Improper Neutralization of Special Elements used in an SQL Command
A security flaw has been discovered in Campcodes School File Management 1.0. This affects an unknown part of the file /admin/update_user.php. Performing manipulation of the argument user_id results in sql injection. It is possible to initiate the attack remote
- 9.8 Critical severity
School Fees Payment Management System: Improper Neutralization of Special Elements used in an SQL Command
A security flaw has been discovered in Campcodes School Fees Payment Management System 1.0. This issue affects some unknown processing of the file /ajax.php?action=delete_course. The manipulation of the argument ID results in sql injection. The attack can be e