A vulnerability has been found in Campcodes Campcodes Supplier Management System 1.0 and classified as critical. Affected is an unknown function of the file /admin/view_products.php. The manipulation of the argument chkId[] leads to sql injection.

It is possible to initiate the attack remotely. Furthermore, there is an exploit available.