CVE-2025-9920: External Control of File Name or Path

A security flaw has been discovered in Campcodes Recruitment Management System 1.0. This impacts the function include of the file /admin/index.php. The manipulation of the argument page results in file inclusion. It is possible to launch the attack remotely. The exploit has been released to the...

CVE-2025-6567

The CVE-2025-6567 entry concerns Campcodes Online Recruitment Management System 1.0. The vulnerability lies in Recruitment/admin/view_application.php where manipulating the ID argument enables SQL injection. This has remote attack potential and the exploit has been disclosed publicly. Connected s...

CVE-2025-5676

CVE-2025-5676 affects Campcodes Online Recruitment Management System 1.0. The vulnerability resides in /admin/ajax.php?action=login where the Username parameter is vulnerable to SQL injection. Exploitation can be remote and the exploit has been disclosed publicly. Multiple sources corroborate the...

CampCodes Online Recruitment Management System 注入漏洞

CampCodes Online Recruitment Management System is a recruitment management system from CampCodes Philippines. An injection vulnerability exists in CampCodes Online Recruitment Management System version 1.0, which is caused by an incorrect manipulation of the parameter positionid in the file...