A vulnerability was found in Campcodes Computer Sales and Inventory System 1.0. It has been rated as critical. The impacted element is an unknown function of the file /pages/sup_searchfrm.php?action=edit. This manipulation of the argument ID causes sql injection.

The identification of this vulnerability is CVE-2025-10436. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.