CVE-2025-7538

A vulnerability classified as critical was found in Campcodes Sales and Inventory System 1.0. This vulnerability affects unknown code of the file /pages/product_update.php. The manipulation of the argument image leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

• CWE-284
• CWE-434

• https://github.com/zhaodaojie/cve/issues/1Exploit, Issue Tracking, Third Party Advisory
• https://vuldb.com/?ctiid.316234Permissions Required
• https://vuldb.com/?id.316234Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.613625Third Party Advisory, VDB Entry
• https://www.campcodes.com/Product
• https://github.com/zhaodaojie/cve/issues/1Exploit, Issue Tracking, Third Party Advisory

Published

Jul 13, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-7532A vulnerability has been found in Tenda FH1202 1.2.0.14(408)…8.8
• CVE-2025-7533A vulnerability was found in code-projects Job Diary 1.0 and…9.8
• CVE-2025-7534A vulnerability was found in PHPGurukul Student Result Manag…9.8
• CVE-2025-7535A vulnerability was found in Campcodes Sales and Inventory S…9.8
• CVE-2025-7536A vulnerability was found in Campcodes Sales and Inventory S…9.8
• CVE-2025-7537A vulnerability classified as critical has been found in Cam…9.8
• CVE-2025-7539A vulnerability, which was classified as critical, has been …9.8
• CVE-2025-7540A vulnerability, which was classified as critical, was found…9.8
• CVE-2025-7541A vulnerability has been found in code-projects Online Appoi…9.8
• CVE-2025-7542A vulnerability was found in PHPGurukul User Registration & …9.8
• CVE-2025-7543A vulnerability was found in PHPGurukul User Registration & …8.8
• CVE-2025-7544A vulnerability was found in Tenda AC1206 15.03.06.23. It ha…8.8