CVE-2025-5079

moderate-risk

Published 2025-05-22

A flaw has been found in PHPGurukul/Campcodes Online Shopping Portal 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/updateorder.php. Executing manipulation of the argument remark can lead to sql injection. The attack may be performed from remote. The exploit has been published and may be used.

Do I need to act?

0.22% chance of exploitation

EPSS score — low exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 7.3/10 High

NETWORK / LOW complexity

Affected Products (2)

Online Shopping Portal

Affected Vendors

Phpgurukul Campcodes

References (4)

Exploit https://github.com/dico-Z/CVE/issues/1

Permissions Required https://vuldb.com/?ctiid.309959

Third Party Advisory https://vuldb.com/?id.309959

Third Party Advisory https://vuldb.com/?submit.581439

/ 100

moderate-risk

Severity 26/34 · High

Exploitability 1/34 · Minimal

Exposure 7/34 · Low