A vulnerability categorized as critical has been discovered in Campcodes Supplier Management System 1.0. This impacts an unknown function of the file /index.php of the component Login. Such manipulation of the argument txtUsername leads to sql injection.
This vulnerability is referenced as CVE-2025-13554. It is possible to launch the attack remotely. Furthermore, an exploit is available.
