CVE-2025-7537 – Campcodes Sales and Inventory System SQL Injection Vulnerability

CVE ID : CVE-2025-7537

Published : July 13, 2025, 7:15 p.m. | 5 hours, 15 minutes ago

Description : A vulnerability classified as critical has been found in Campcodes Sales and Inventory System 1.0. This affects an unknown part of the file /pages/product_update.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

Severity: 7.3 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

Read More

CVE-2025-53865 – Roundup Cross-Site Scripting Vulnerability

CVE ID : CVE-2025-53865

Published : July 13, 2025, 8:15 p.m. | 4 hours, 15 minutes ago

Description : In Roundup before 2.5.0, XSS can occur via interaction between URLs and issue tracker templates (devel and responsive).

Severity: 6.4 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

Read More

CVE-2025-7539 – Code-projects Online Appointment Booking System SQL Injection Vulnerability

CVE ID : CVE-2025-7539

Published : July 13, 2025, 8:15 p.m. | 4 hours, 15 minutes ago

Description : A vulnerability, which was classified as critical, has been found in code-projects Online Appointment Booking System 1.0. This issue affects some unknown processing of the file /getdoctordaybooking.php. The manipulation of the argument cid leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

Severity: 7.3 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

Read More

CVE-2025-7540 – Code-projects Online Appointment Booking System SQL Injection Vulnerability

CVE ID : CVE-2025-7540

Published : July 13, 2025, 8:15 p.m. | 4 hours, 15 minutes ago

Description : A vulnerability, which was classified as critical, was found in code-projects Online Appointment Booking System 1.0. Affected is an unknown function of the file /getclinic.php. The manipulation of the argument townid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.

Severity: 7.3 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

Read More