CVE-2025-4735
Last modified
CVE-2025-4735 is a high-severity vulnerability rated 8.8/10 on the CVSS scale. A vulnerability has been found in Campcodes Sales and Inventory System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /pages/product.php. EPSS estimates a 0.34% chance of exploitation in the next 30 days.
Description
A vulnerability has been found in Campcodes Sales and Inventory System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /pages/product.php. The manipulation of the argument Picture leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Campcodes | Sales And Inventory System | 1.0 |
References
- https://github.com/2319797429/CVE/issues/2Exploit, Issue Tracking, Third Party Advisory
- https://vuldb.com/?ctiid.309037Permissions Required
- https://vuldb.com/?id.309037Third Party Advisory, VDB Entry
- https://vuldb.com/?submit.570715Third Party Advisory, VDB Entry
- https://www.campcodes.com/Product
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2025-4735?
How severe is CVE-2025-4735?
How do I fix CVE-2025-4735?
How Strix Helps
- Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2025
- CVE-2025-47344Memory corruption while handling sensor utility operations.6.4
- CVE-2025-47345Cryptographic issue may occur while encrypting license data.8.4
- CVE-2025-47346Memory corruption while processing a secure logging command …7.8
- CVE-2025-47347Memory corruption while processing control commands in the v…7.8
- CVE-2025-47348Memory corruption while processing identity credential opera…7.8
- CVE-2025-47349Memory corruption while processing an escape call.7.8
- CVE-2025-47350Memory corruption while handling concurrent memory mapping a…7.8
- CVE-2025-47351Memory corruption while processing user buffers.7.8
- CVE-2025-47352Memory corruption while processing audio streaming operation…7.8
- CVE-2025-47353Memory corruption while processing request sent from GVM.7.8
- CVE-2025-47354Memory corruption while allocating buffers in DSP service.7.8
- CVE-2025-47355Memory corruption while invoking remote procedure IOCTL call…7.8
Are you affected by CVE-2025-4735?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST