CVE-2025-6955

CVE-2025-6955 affects Campcodes Employee Management System 1.0, with a vulnerability in the /process/aprocess.php file where manipulating the mailuid parameter causes an SQL injection. The issue is exploitable remotely and has public PoC/details in multiple sources; exploitation details are not u...

CVE-2025-6954 Campcodes Employee Management System applyleave.php sql injection

A vulnerability has been found in Campcodes Employee Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /applyleave.php. The manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The explo...

CVE-2025-6954

CVE-2025-6954 concerns Campcodes Employee Management System 1.0, where an attacker can exploit SQL injection by manipulating the ID argument in /applyleave.php. The root cause is improper handling of the ID parameter, enabling remote exploitation with no user interaction. Reported CVSS metrics in...

CVE-2025-6954 Campcodes Employee Management System applyleave.php sql injection

A vulnerability has been found in Campcodes Employee Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /applyleave.php. The manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The explo...

CVE-2025-6935

A vulnerability was found in Campcodes Sales and Inventory System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /pages/paymentadd.php. The manipulation of the argument cid leads to sql injection. The attack may be launched remotely. The exploit h...

CVE-2025-6935

A vulnerability was found in Campcodes Sales and Inventory System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /pages/paymentadd.php. The manipulation of the argument cid leads to sql injection. The attack may be launched remotely. The exploit h...

PT-2025-27555 · Unknown · Campcodes Employee Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Employee Management System version 1.0 Description: A critical issue has been found in the system, affecting an unknown function of the file /eloginwel.php. The manipulation of the ID argument leads to SQL injection. It is possible ...

PT-2025-27549 · Campcodes · Campcodes Employee Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Employee Management System version 1.0 Description: A critical issue affects the processing of the file /edit.php, where the manipulation of the ID argument leads to SQL injection. The attack can be initiated remotely...

CVE-2025-6956: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Campcodes Employee Management System 1.0. It has been classified as critical. This affects an unknown part of the file /changepassemp.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

CVE-2025-6963: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in Campcodes Employee Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /myprofile.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclos...

CVE-2025-6962: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in Campcodes Employee Management System 1.0. This affects an unknown part of the file /myprofileup.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

CVE-2025-6961: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in Campcodes Employee Management System 1.0. Affected by this issue is some unknown functionality of the file /mark.php. The manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit h...

CVE-2025-6960: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in Campcodes Employee Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /empproject.php. The manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has be...

CVE-2025-6958: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Campcodes Employee Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /edit.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed ...

CVE-2025-6957: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Campcodes Employee Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /process/eprocess.php. The manipulation of the argument mailuid leads to sql injection. The attack can be initiated remotely. The exploit ha...

CVE-2025-6954: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in Campcodes Employee Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /applyleave.php. The manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The explo...

CVE-2025-6955: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Campcodes Employee Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /process/aprocess.php. The manipulation of the argument mailuid leads to sql injection. The attack may be launched remotely. The explo...

CVE-2025-6935: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Campcodes Sales and Inventory System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /pages/paymentadd.php. The manipulation of the argument cid leads to sql injection. The attack may be launched remotely. The exploit h...

CampCodes Employee Management System Injection Vulnerability

CampCodes Employee Management System is an employee management system from CampCodes Philippines. An injection vulnerability exists in CampCodes Employee Management System version 1.0, which results from SQL injection due to incorrect manipulation of the parameter ID in the file /myprofile.php...

CampCodes Employee Management System Injection Vulnerability

CampCodes Employee Management System is an employee management system from CampCodes Philippines. An injection vulnerability exists in CampCodes Employee Management System version 1.0, which results from SQL injection due to incorrect manipulation of the parameter ID in the file /edit.php...