CampCodes vulnerabilities
We track 422 vulnerabilities in CampCodes products across 60+ products. 422 are rated high or critical, and none are known to be exploited. The most recent was published on November 5, 2026.
Latest CampCodes vulnerabilities
- 9.8 Critical severity
Retro Basketball Shoes Online Store: Improper Neutralization of Special Elements used in an SQL Command
A security vulnerability has been detected in Campcodes Retro Basketball Shoes Online Store 1.0. This issue affects some unknown processing of the file /admin/admin_football.php. The manipulation of the argument pid leads to sql injection. Remote exploitation
- 9.8 Critical severity
Retro Basketball Shoes Online Store: Improper Neutralization of Special Elements used in an SQL Command
A weakness has been identified in Campcodes Retro Basketball Shoes Online Store 1.0. This vulnerability affects unknown code of the file /admin/admin_product.ph. Executing a manipulation of the argument pid can lead to sql injection. The attack may be launched
- 9.8 Critical severity
Retro Basketball Shoes Online Store: Improper Neutralization of Special Elements used in an SQL Command
A security flaw has been discovered in Campcodes Retro Basketball Shoes Online Store 1.0. This affects an unknown part of the file /admin/admin_feature.php. Performing a manipulation of the argument pid results in sql injection. The attack may be initiated rem
- 9.8 Critical severity
Retro Basketball Shoes Online Store: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was identified in Campcodes Retro Basketball Shoes Online Store 1.0. Affected by this issue is some unknown functionality of the file /admin/admin_index.php. Such manipulation of the argument Username leads to sql injection. The attack can be l
- 9.8 Critical severity
Online Beauty Parlor Management System: Improper Neutralization of Special Elements used in an SQL Command
A security vulnerability has been detected in Campcodes Online Beauty Parlor Management System 1.0. The impacted element is an unknown function of the file /admin/search-appointment.php. Such manipulation of the argument searchdata leads to sql injection. The
- 9.8 Critical severity
Online Apartment Visitor Management System: Improper Neutralization of Special Elements used in an SQL Command
A weakness has been identified in Campcodes Online Apartment Visitor Management System 1.0. This impacts an unknown function of the file /forgot-password.php. This manipulation of the argument email causes sql injection. It is possible to initiate the attack r
- 9.8 Critical severity
Online Apartment Visitor Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in Campcodes Online Apartment Visitor Management System 1.0. Impacted is an unknown function of the file /admin-profile.php. Performing a manipulation of the argument mobilenumber results in sql injection. Remote exploitation of the a
- 9.8 Critical severity
Online Learning Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was detected in Campcodes Online Learning Management System 1.0. This affects an unknown part of the file /admin/calendar_of_events.php. The manipulation of the argument date_start results in sql injection. The attack may be launched remotely.
- 9.8 Critical severity
Advanced Online Voting Management System: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability has been found in Campcodes Advanced Online Voting Management System 1.0. The impacted element is an unknown function of the file /admin/login.php. Such manipulation of the argument Username leads to sql injection. The attack can be executed re
- 8.8 High severity
Advanced Online Voting Management System: Improper Access Control
A weakness has been identified in Campcodes Advanced Online Voting Management System 1.0. This vulnerability affects unknown code of the file /admin/voters_add.php. Executing manipulation of the argument photo can lead to unrestricted upload. The attack can be
- 8.8 High severity
Advanced Online Voting Management System: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A flaw has been found in Campcodes Advanced Online Voting Management System 1.0. This affects an unknown function of the file /admin/voters_add.php. Executing manipulation of the argument firstname can lead to sql injection. The attack can be executed remotely
- 8.8 High severity
Advanced Online Voting Management System: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability was detected in Campcodes Advanced Online Voting Management System 1.0. The impacted element is an unknown function of the file /index.php. Performing manipulation of the argument voter results in sql injection. Remote exploitation of the attac
- 9.8 Critical severity
Online Apartment Visitor Management System: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A security flaw has been discovered in Campcodes Online Apartment Visitor Management System 1.0. The affected element is an unknown function of the file /bwdates-reports-details.php. The manipulation of the argument fromdate/todate results in sql injection. Th
- 9.8 Critical severity
Online Apartment Visitor Management System: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability was identified in Campcodes Online Apartment Visitor Management System 1.0. Impacted is an unknown function of the file /search-visitor.php. The manipulation of the argument searchdata leads to sql injection. The attack may be initiated remotel
- 9.8 Critical severity
Online Apartment Visitor Management System: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability was determined in Campcodes Online Apartment Visitor Management System 1.0. This issue affects some unknown processing of the file /index.php. Executing a manipulation of the argument Username can lead to sql injection. The attack can be launch
- 9.8 Critical severity
Online Apartment Visitor Management System: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A security flaw has been discovered in Campcodes Online Apartment Visitor Management System 1.0. Affected is an unknown function of the file /visitor-detail.php. The manipulation of the argument editid results in sql injection. The attack can be executed remot
- 9.8 Critical severity
Advanced Online Voting Management System: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A weakness has been identified in Campcodes Advanced Online Voting Management System 1.0. This affects an unknown function of the file /admin/candidates_edit.php. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely.
- 9.8 Critical severity
Online Learning Management System: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A security flaw has been discovered in Campcodes Online Learning Management System 1.0. The impacted element is an unknown function of the file /admin/school_year.php. The manipulation of the argument school_year results in sql injection. It is possible to lau
- 9.8 Critical severity
Computer Sales and Inventory System: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability was identified in Campcodes Computer Sales and Inventory System 1.0. The affected element is an unknown function of the file /pages/us_edit.php?action=edit. The manipulation of the argument ID leads to sql injection. It is possible to initiate
- 9.8 Critical severity
Online Learning Management System: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A weakness has been identified in Campcodes Online Learning Management System 1.0. Affected is an unknown function of the file /admin/edit_content.php. Executing manipulation of the argument Title can lead to sql injection. The attack can be launched remotely.
- 9.8 Critical severity
Farm Management System: Improper Limitation of a Pathname to a Restricted Directory
A security flaw has been discovered in Campcodes Farm Management System 1.0. Affected by this issue is some unknown functionality. The manipulation results in file and directory information exposure. The attack may be performed from remote. The exploit has bee
- 9.8 Critical severity
Online Learning Management System: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability was determined in Campcodes Online Learning Management System 1.0. Affected is an unknown function of the file /admin/add_content.php. Executing manipulation of the argument Title can lead to sql injection. The attack can be executed remotely.
- 9.8 Critical severity
Online Learning Management System: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability was found in Campcodes Online Learning Management System 1.0. This impacts an unknown function of the file /admin/edit_teacher.php. Performing manipulation of the argument department results in sql injection. Remote exploitation of the attack i
- 9.8 Critical severity
Online Learning Management System: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability has been found in Campcodes Online Learning Management System 1.0. This affects an unknown function of the file /admin/de_activate.php. Such manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploi
- 9.8 Critical severity
Online Learning Management System: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A security flaw has been discovered in Campcodes Online Learning Management System 1.0. Impacted is an unknown function of the file /admin/teachers.php. The manipulation of the argument department results in sql injection. It is possible to launch the attack r
- 9.8 Critical severity
Online Learning Management System: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability was identified in Campcodes Online Learning Management System 1.0. This issue affects some unknown processing of the file /admin/edit_department.php. The manipulation of the argument d leads to sql injection. It is possible to initiate the atta
- 9.8 Critical severity
Online Learning Management System: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability was determined in Campcodes Online Learning Management System 1.0. This vulnerability affects unknown code of the file /admin/save_student.php. Executing manipulation of the argument class_id can lead to sql injection. The attack may be perform
- 9.8 Critical severity
Online Learning Management System: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability was found in Campcodes Online Learning Management System 1.0. This affects an unknown part of the file /admin/edit_student.php. Performing manipulation of the argument cys results in sql injection. The attack is possible to be carried out remot
- 9.8 Critical severity
Computer Sales and Inventory System: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A security vulnerability has been detected in Campcodes Computer Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/us_edit1.php. The manipulation of the argument ID leads to sql injection. Remote expl
- 9.8 Critical severity
Point of Sale System POS: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A security flaw has been discovered in Campcodes Point of Sale System POS 1.0. Affected by this issue is some unknown functionality of the file /login.php. Performing manipulation of the argument Username results in sql injection. The attack is possible to be
- 9.8 Critical severity
Gym Management System: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A security flaw has been discovered in Campcodes Gym Management System 1.0. Impacted is an unknown function of the file /ajax.php?action=login. Performing manipulation of the argument Username results in sql injection. It is possible to initiate the attack rem
- 8.8 High severity
Society Membership Information System: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability was identified in Campcodes Society Membership Information System 1.0. This issue affects some unknown processing of the file /check_student.php. Such manipulation of the argument student_id leads to sql injection. The attack may be performed f
- 9.8 Critical severity
Computer Sales and Inventory System: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability has been found in Campcodes Computer Sales and Inventory System 1.0. Impacted is an unknown function of the file /pages/pro_edit1.php. The manipulation of the argument prodcode leads to sql injection. The attack is possible to be carried out re
- 9.8 Critical severity
Computer Sales and Inventory System: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A flaw has been found in Campcodes Computer Sales and Inventory System 1.0. This issue affects some unknown processing of the file /pages/inv_edit1.php. Executing manipulation of the argument idd can lead to sql injection. The attack can be executed remotely.
- 9.8 Critical severity
Computer Sales and Inventory System: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability was detected in Campcodes Computer Sales and Inventory System 1.0. This vulnerability affects unknown code of the file /pages/sup_edit1.php. Performing manipulation of the argument ID results in sql injection. Remote exploitation of the attack
- 8.8 High severity
Online Beauty Parlor Management System: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A security flaw has been discovered in Campcodes Online Beauty Parlor Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/sales-reports-detail.php. The manipulation of the argument fromdate/todate results in sql
- 8.8 High severity
Online Beauty Parlor Management System: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability was identified in Campcodes Online Beauty Parlor Management System 1.0. Affected is an unknown function of the file /admin/view-appointment.php. The manipulation of the argument viewid leads to sql injection. The attack can be initiated remotel
- 9.8 Critical severity
Online Learning Management System: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A weakness has been identified in Campcodes Online Learning Management System 1.0. This vulnerability affects unknown code of the file /admin/admin_user.php. Executing manipulation of the argument firstname can lead to sql injection. The attack may be launched
- 9.8 Critical severity
Online Learning Management System: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability was detected in Campcodes Online Learning Management System 1.0. The impacted element is an unknown function of the file /admin/edit_user.php. Performing manipulation of the argument firstname results in sql injection. The attack is possible to
- 9.8 Critical severity
Online Learning Management System: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A security vulnerability has been detected in Campcodes Online Learning Management System 1.0. The affected element is an unknown function of the file /admin/department.php. Such manipulation of the argument d leads to sql injection. The attack can be executed