CVE-2025-11039: High SQL Injection in Campcodes Sales Inventory
CVE-2025-11039: High SQL injection in Campcodes Computer Sales and Inventory System. No fix is listed, so limit access and switch to prepared statements.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
CVE-2025-11039: High SQL injection in Campcodes Computer Sales and Inventory System. No fix is listed, so limit access and switch to prepared statements.
CVE-2025-11037: High SQL injection in code-projects E-Commerce Website 1.0. No fix is listed, so restrict access, use prepared statements or retire it.
CVE-2025-11036: High SQL injection in code-projects E-Commerce Website 1.0. No fix is listed, so restrict access, use prepared statements or retire it.
CVE-2025-11035 is a medium XML external entity flaw in Jinher OA 2.0, reachable remotely. No fix is listed, so block outside access and ask for a patch.
CVE-2025-11033: High SQL injection in kidaze CourseSelectionSystem builds. No fix is listed, so restrict access, use prepared statements or retire it.
CVE-2025-11032: High SQL injection in kidaze CourseSelectionSystem builds. No fix is listed, so restrict access, use prepared statements or retire it.
CVE-2025-11005 is a critical OS command injection in TOTOLINK X6000R firmware through V9.4.0cu.1458_B20250708. Install the patched firmware.
CVE-2025-10857: High SQL injection in Campcodes Point of Sale System POS 1.0. No fix is listed, so restrict access, use prepared statements or retire it.
CVE-2025-10851: High SQL injection in Campcodes Gym Management System 1.0. No fix is listed, so restrict access, use prepared statements or retire it.
Weekly insights on software supply chain security, delivered to your inbox.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.