PT-2025-44073 · Campcodes · Campcodes Retro Basketball Shoes Online Store

Hanyu Luo · CVE-2025-12338 · Published 2025-10-28 · Updated 2025-11-03

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Campcodes Retro Basketball Shoes Online Store version 1.0

Description A weakness exists in Campcodes Retro Basketball Shoes Online Store 1.0. The issue affects unknown code within the /admin/admin product.ph file. Manipulation of the pid argument can lead to SQL injection. The attack can be launched remotely. The exploit has been made publicly available.

Recommendations For Campcodes Retro Basketball Shoes Online Store version 1.0, address the SQL injection issue by sanitizing or validating the pid argument before using it in database queries. As a temporary workaround, restrict access to the /admin/admin product.ph file.

Exploit

Fix

Special Elements Injection

SQL injection

Weakness Enumeration

CWE-74

CWE-89

Related Identifiers

CVE-2025-12338

Affected Products

Campcodes Retro Basketball Shoes Online Store

References · 10

• 🔥 https://github.com/HYLCXH/CVE/issues/16 · Exploit
• https://osv.dev/vulnerability/CVE-2025-12338 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-12338 · Security Note
• https://vuldb.com/?id.330125 · Note
• https://vuldb.com/?submit.674492 · Note
• https://t.me/cveNotify/141364 · Telegram Post
• https://t.me/CVEtracker/35922 · Telegram Post
• https://twitter.com/CVEnew/status/1982976917952254004 · Twitter Post
• https://vuldb.com/?ctiid.330125 · Note
• https://campcodes.com · Note