Skip to content
OpenAdvisories

Vendor

Campcodes

590 known vulnerabilities.

Campcodes at a glance

Last 12 months
49
Critical · all time
0
Exploited · all time
0
Public exploit · all time
7
New vulnerabilities per month · last 12 months
0 10 20 December 2025: 19 vulnerabilities Dec 2025 January 2026: 2 vulnerabilities February 2026: 0 vulnerabilities March 2026: 2 vulnerabilities Mar April 2026: 2 vulnerabilities May 2026: 0 vulnerabilities June 2026: 0 vulnerabilities Jun July 2026: 0 vulnerabilities August 2026: 0 vulnerabilities September 2026: 0 vulnerabilities Sep October 2026: 0 vulnerabilities November 2026: 4 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202640
Oct 202600
Sep 202600
Aug 202600
Jul 202600
Jun 202600
May 202600
Apr 202620
Mar 202620
Feb 202600
Jan 202620
Dec 2025190
Nov 2025220
Oct 2025170
Sep 2025710
Aug 2025230
Jul 2025650
Jun 2025200
May 2025580
Apr 202500
Mar 202500
Feb 202520
Jan 2025130
Dec 202400

590 results · Feed

  • High 7.3

    Campcodes Complete Sales and Inventory System with Credit Management login.php sql injection

    A vulnerability was found in Campcodes Complete Sales and Inventory System with Credit Management 1.0. This issue affects some unknown processing of the file /ahira/login.php. Performing a manipulation of the argument branch results in sql injection. The atta…

  • Low 3.7

    Campcodes Bitcoin Wallet System ForgotPasswordController.php random_int excessive authentication

    A flaw has been found in Campcodes Bitcoin Wallet System 1.0. This affects the function random_int of the file core/app/Http/Controllers/Auth/ForgotPasswordController.php. This manipulation causes improper restriction of excessive authentication attempts. Rem…

  • High 7.3

    Campcodes Division Regional Athletic Meet Game Result Matrix System check-user.php sql injection

    A vulnerability was identified in Campcodes Division Regional Athletic Meet Game Result Matrix System up to 2.1. This affects an unknown function of the file /dipam/check-user.php. Such manipulation of the argument abbr leads to sql injection. It is possible …

  • High 7.3

    Campcodes Complete Advance Loan Management System banner.php move_uploaded_file unrestricted upload

    A security vulnerability has been detected in Campcodes Complete Advance Loan Management System 1.0. This affects the function move_uploaded_file of the file /loan/application/banner.php. Such manipulation of the argument image leads to unrestricted upload. T…

  • Medium 6.3

    Campcodes Complete POS Management and Inventory System Environment Variable SettingsController.php injection

    A vulnerability was determined in Campcodes Complete POS Management and Inventory System up to 4.0.6. This affects an unknown function of the file app/Http/Controllers/SettingsController.php of the component Environment Variable Handler. Executing a manipulat…

  • Medium 6.3

    Campcodes Complete Online Learning Management System Crud_model.php add_lesson unrestricted upload

    A flaw has been found in Campcodes Complete Online Learning Management System 1.0. This impacts the function add_lesson of the file /application/models/Crud_model.php. This manipulation causes unrestricted upload. It is possible to initiate the attack remotel…

  • Low 3.5

    Campcodes Division Regional Athletic Meet Game Result Matrix System save_up_athlete.php cross site scripting

    A weakness has been identified in Campcodes Division Regional Athletic Meet Game Result Matrix System 2.1. This vulnerability affects unknown code of the file save_up_athlete.php. This manipulation of the argument a_name causes cross site scripting. It is pos…

  • Low 3.5

    Campcodes Division Regional Athletic Meet Game Result Matrix System save-games.php cross site scripting

    A security flaw has been discovered in Campcodes Division Regional Athletic Meet Game Result Matrix System 2.1. This affects an unknown part of the file save-games.php. The manipulation of the argument game_name results in cross site scripting. The attack may…

  • Medium 6.3

    Campcodes Supplier Management System edit_profile.php sql injection

    A flaw has been found in Campcodes Supplier Management System 1.0. Affected by this issue is some unknown functionality of the file /retailer/edit_profile.php. This manipulation of the argument txtRetailerAddress causes sql injection. Remote exploitation of t…

  • Medium 6.3

    campcodes School File Management System save_file.php unrestricted upload

    A security vulnerability has been detected in campcodes School File Management System 1.0. The affected element is an unknown function of the file /save_file.php. The manipulation of the argument File leads to unrestricted upload. The attack may be initiated …

  • Low 2.4

    Campcodes Park Ticketing System admin_class.php save_pricing cross site scripting

    A vulnerability was found in Campcodes Park Ticketing System 1.0. The impacted element is the function save_pricing of the file admin_class.php. The manipulation of the argument name/ride results in cross site scripting. The attack may be performed from remot…

  • High 7.3

    Campcodes Supplier Management System view_products.php sql injection

    A vulnerability has been found in Campcodes Supplier Management System 1.0. Affected is an unknown function of the file /admin/view_products.php. The manipulation of the argument chkId[] leads to sql injection. It is possible to initiate the attack remotely. …

  • High 7.3

    Campcodes Supplier Management System add_area.php sql injection

    A flaw has been found in Campcodes Supplier Management System 1.0. This impacts an unknown function of the file /admin/add_area.php. Executing a manipulation of the argument txtAreaCode can lead to sql injection. The attack may be performed from remote. The e…

  • Low 2.4

    Campcodes Complete Online Beauty Parlor Management System search-invoices.php cross site scripting

    A vulnerability was determined in Campcodes Complete Online Beauty Parlor Management System 1.0. This vulnerability affects unknown code of the file /admin/search-invoices.php. Executing a manipulation of the argument searchdata can lead to cross site scripti…

  • Low 2.4

    Campcodes Complete Online Beauty Parlor Management System bwdates-reports-details.php cross site scripting

    A weakness has been identified in Campcodes Complete Online Beauty Parlor Management System 1.0. The affected element is an unknown function of the file /admin/bwdates-reports-details.php. Executing a manipulation of the argument fromdate can lead to cross si…

  • High 7.3

    Campcodes Complete Online Beauty Parlor Management System view-appointment.php sql injection

    A security flaw has been discovered in Campcodes Complete Online Beauty Parlor Management System 1.0. Impacted is an unknown function of the file /admin/view-appointment.php. Performing a manipulation of the argument viewid results in sql injection. The attac…

  • High 7.3

    Campcodes Complete Online Beauty Parlor Management System search-invoices.php sql injection

    A vulnerability was identified in Campcodes Complete Online Beauty Parlor Management System 1.0. This issue affects some unknown processing of the file /admin/search-invoices.php. Such manipulation leads to sql injection. The attack can be launched remotely. …

  • High 7.3

    Campcodes Supplier Management System add_category.php sql injection

    A vulnerability was detected in Campcodes Supplier Management System 1.0. This affects an unknown function of the file /admin/add_category.php. Performing a manipulation of the argument txtCategoryName results in sql injection. The attack is possible to be ca…

  • Medium 5.4

    Campcodes Advanced Voting Management System Password voters_edit.php improper authorization

    A security flaw has been discovered in Campcodes Advanced Voting Management System 1.0. The impacted element is an unknown function of the file /admin/voters_edit.php of the component Password Handler. Performing a manipulation of the argument ID results in i…

  • High 7.3

    Campcodes Supplier Management System add_retailer.php sql injection

    A vulnerability was identified in Campcodes Supplier Management System 1.0. This affects an unknown function of the file /admin/add_retailer.php. The manipulation of the argument cmbAreaCode leads to sql injection. The attack is possible to be carried out rem…

  • High 7.3

    campcodes Advanced Online Examination System loginExe.php sql injection

    A vulnerability was detected in campcodes Advanced Online Examination System 1.0. This affects an unknown function of the file /query/loginExe.php. Performing a manipulation of the argument Username results in sql injection. It is possible to initiate the att…

  • High 7.3

    Campcodes Supplier Management System view_unit.php sql injection

    A vulnerability was identified in Campcodes Supplier Management System 1.0. This issue affects some unknown processing of the file /admin/view_unit.php. The manipulation of the argument chkId[] leads to sql injection. Remote exploitation of the attack is poss…

  • High 7.3

    campcodes Online Student Enrollment System register.php unrestricted upload

    A flaw has been found in campcodes Online Student Enrollment System 1.0. This impacts an unknown function of the file /admin/register.php. Executing a manipulation of the argument photo can lead to unrestricted upload. The attack can be launched remotely. The…

  • Medium 4.7

    campcodes Online Student Enrollment System index.php unrestricted upload

    A vulnerability was detected in campcodes Online Student Enrollment System 1.0. This affects an unknown function of the file /admin/index.php?page=user-profile. Performing a manipulation of the argument userphoto results in unrestricted upload. The attack can…

  • High 7.3

    Campcodes Retro Basketball Shoes Online Store admin_running.php sql injection

    A flaw has been found in Campcodes Retro Basketball Shoes Online Store 1.0. The affected element is an unknown function of the file /admin/admin_running.php. This manipulation of the argument pid causes sql injection. It is possible to initiate the attack rem…

  • High 7.3

    Campcodes Supplier Management System add_unit.php sql injection

    A vulnerability has been found in Campcodes Supplier Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/add_unit.php. Such manipulation of the argument txtunitDetails leads to sql injection. The attack can be …

  • High 7.3

    Campcodes Supplier Management System add_distributor.php sql injection

    A flaw has been found in Campcodes Supplier Management System 1.0. Affected is an unknown function of the file /admin/add_distributor.php. This manipulation of the argument txtDistributorAddress causes sql injection. The attack can be initiated remotely. The …

  • Medium 4.7

    Campcodes Retro Basketball Shoes Online Store admin_running.php unrestricted upload

    A weakness has been identified in Campcodes Retro Basketball Shoes Online Store 1.0. The impacted element is an unknown function of the file /admin/admin_running.php. Executing a manipulation of the argument product_image can lead to unrestricted upload. It i…

  • High 7.3

    Campcodes School File Management System update_query.php sql injection

    A weakness has been identified in Campcodes School File Management System 1.0. This impacts an unknown function of the file /update_query.php. This manipulation of the argument stud_id causes sql injection. The attack can be initiated remotely. The exploit ha…

  • High 7.3

    Campcodes Online Polling System registeracc.php sql injection

    A vulnerability has been found in Campcodes Online Polling System 1.0. Affected by this issue is some unknown functionality of the file /registeracc.php. The manipulation of the argument email leads to sql injection. The attack may be initiated remotely. The …

  • High 7.3

    Campcodes Online Polling System checklogin.php sql injection

    A flaw has been found in Campcodes Online Polling System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/checklogin.php. Executing a manipulation of the argument myusername can lead to sql injection. The attack can be launch…

  • High 7.3

    Campcodes School File Management System Login index.php sql injection

    A vulnerability was detected in Campcodes School File Management System 1.0. Affected is an unknown function of the file /index.php of the component Login. Performing a manipulation of the argument stud_no results in sql injection. The attack can be initiated…

  • High 7.3

    Campcodes Supplier Management System Login index.php sql injection

    A security vulnerability has been detected in Campcodes Supplier Management System 1.0. This impacts an unknown function of the file /index.php of the component Login. Such manipulation of the argument txtUsername leads to sql injection. It is possible to lau…

  • Low 2.4

    Campcodes Complete Online Beauty Parlor Management System customer-list.php cross site scripting

    A vulnerability was identified in Campcodes Complete Online Beauty Parlor Management System 1.0. This vulnerability affects unknown code of the file /admin/customer-list.php. The manipulation of the argument Name leads to cross site scripting. The attack may …

  • Medium 4.7

    Campcodes Supplier Management System add_product.php sql injection

    A vulnerability has been found in Campcodes Supplier Management System 1.0. This affects an unknown function of the file /admin/add_product.php. The manipulation of the argument txtProductName leads to sql injection. Remote exploitation of the attack is possi…

  • Medium 4.7

    Campcodes Retro Basketball Shoes Online Store admin_product.php unrestricted upload

    A flaw has been found in Campcodes Retro Basketball Shoes Online Store 1.0. The impacted element is an unknown function of the file /admin/admin_product.php. Executing a manipulation of the argument product_image can lead to unrestricted upload. The attack ma…

  • Low 2.4

    Campcodes Retro Basketball Shoes Online Store admin_running.php cross site scripting

    A vulnerability was determined in Campcodes Retro Basketball Shoes Online Store 1.0. Affected by this issue is some unknown functionality of the file /admin/admin_running.php. Executing a manipulation of the argument product_name can lead to cross site script…

  • Medium 4.7

    Campcodes Retro Basketball Shoes Online Store admin_football.php unrestricted upload

    A vulnerability was found in Campcodes Retro Basketball Shoes Online Store 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/admin_football.php. Performing a manipulation of the argument product_image results in unrestricted u…

  • High 7.3

    Campcodes Retro Basketball Shoes Online Store receipt.php sql injection

    A vulnerability has been found in Campcodes Retro Basketball Shoes Online Store 1.0. Affected is an unknown function of the file /admin/receipt.php. Such manipulation of the argument tid leads to sql injection. The attack can be executed remotely. The exploit…

  • High 7.3

    Campcodes Supplier Management System confirm_order.php sql injection

    A vulnerability was found in Campcodes Supplier Management System 1.0. This affects an unknown part of the file /manufacturer/confirm_order.php. Performing a manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The e…