CVE-2026-0597 | Campcodes Supplier Management System 1.0 edit_profile.php txtRetailerAddress sql injection

A vulnerability was found in Campcodes Supplier Management System 1.0. It has been classified as critical. Affected by this issue is some unknown functionality of the file /retailer/edit_profile.php. This manipulation of the argument txtRetailerAddress causes sql injection.

This vulnerability is registered as CVE-2026-0597. Remote exploitation of the attack is possible. Furthermore, an exploit is available.