A vulnerability was found in Campcodes Online Water Billing System 1.0 and classified as critical. This affects an unknown function of the file /addclient1.php. Executing manipulation of the argument lname can lead to sql injection.
This vulnerability is tracked as CVE-2025-9492. The attack can be launched remotely. Moreover, an exploit is present.
Other parameters might be affected as well.
