Lucene search
K

4891 matches found

Positive Technologies
Positive Technologies
added 2025/11/17 12:0 a.m.2 views

PT-2025-47136

Name of the Vulnerable Software and Affected Versions Campcodes School Fees Payment Management System version 1.0 Description A weakness exists in Campcodes School Fees Payment Management System 1.0. Manipulation of the ID argument in the file '/ajax.php?action=delete fees' can lead to SQL...

6.5CVSS6.8AI score0.0027EPSS
Exploits1References8
RedhatCVE
RedhatCVE
added 2025/11/13 7:8 p.m.10 views

CVE-2025-13057

A vulnerability was identified in Campcodes School Fees Payment Management System 1.0. Impacted is an unknown function of the file /ajax.php?action=savestudent. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit is publicly available and...

9.8CVSS7.1AI score0.00282EPSS
Exploits1References1
NVD
NVD
added 2025/11/12 7:15 p.m.3 views

CVE-2025-13057

A vulnerability was identified in Campcodes School Fees Payment Management System 1.0. Impacted is an unknown function of the file /ajax.php?action=savestudent. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit is publicly available and...

9.8CVSS0.00282EPSS
Exploits1References5
CVE
CVE
added 2025/11/12 6:32 p.m.10 views

CVE-2025-13057

Campcodes School Fees Payment Management System 1.0 is affected by a SQL injection in the /ajax.php?action=save_student handler, triggered by manipulating the ID parameter. The vulnerability is treatable as remote and exploitable without authentication in affected deployments; multiple sources re...

9.8CVSS6.4AI score0.00282EPSS
Exploits1References5Affected Software1
Cvelist
Cvelist
added 2025/11/12 6:32 p.m.8 views

CVE-2025-13057 Campcodes School Fees Payment Management System ajax.php sql injection

A vulnerability was identified in Campcodes School Fees Payment Management System 1.0. Impacted is an unknown function of the file /ajax.php?action=savestudent. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit is publicly available and...

6.5CVSS0.00282EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2025/11/12 6:32 p.m.3 views

CVE-2025-13057 Campcodes School Fees Payment Management System ajax.php sql injection

A vulnerability was identified in Campcodes School Fees Payment Management System 1.0. Impacted is an unknown function of the file /ajax.php?action=savestudent. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit is publicly available and...

6.5CVSS6.4AI score0.00282EPSS
Exploits1References5
CNNVD
CNNVD
added 2025/11/12 12:0 a.m.3 views

CampCodes School Fees Payment Management System 安全漏洞

School Fees Payment Management System is a tuition payment management system. The School Fees Payment Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter ID of the file...

9.8CVSS6.7AI score0.00282EPSS
Exploits1References6
Positive Technologies
Positive Technologies
added 2025/11/12 12:0 a.m.6 views

PT-2025-46686

Name of the Vulnerable Software and Affected Versions Campcodes School Fees Payment Management System version 1.0 Description A flaw exists in Campcodes School Fees Payment Management System 1.0. The issue involves the manipulation of the ID argument in the file '/ajax.php?action=save student',...

6.5CVSS6.3AI score0.00282EPSS
Exploits1References7
RedhatCVE
RedhatCVE
added 2025/11/08 6:51 p.m.4 views

CVE-2025-12873

A security flaw has been discovered in Campcodes School File Management 1.0. This affects an unknown part of the file /admin/updateuser.php. Performing manipulation of the argument userid results in sql injection. It is possible to initiate the attack remotely. The exploit has been released to th...

9.8CVSS7.1AI score0.00293EPSS
Exploits1References1
OSV
OSV
added 2025/11/07 6:15 p.m.1 views

CVE-2025-12873

A security flaw has been discovered in Campcodes School File Management 1.0. This affects an unknown part of the file /admin/updateuser.php. Performing manipulation of the argument userid results in sql injection. It is possible to initiate the attack remotely. The exploit has been released to th...

9.8CVSS5.8AI score
Exploits0References5
NVD
NVD
added 2025/11/07 6:15 p.m.3 views

CVE-2025-12873

A security flaw has been discovered in Campcodes School File Management 1.0. This affects an unknown part of the file /admin/updateuser.php. Performing manipulation of the argument userid results in sql injection. It is possible to initiate the attack remotely. The exploit has been released to th...

9.8CVSS0.00293EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2025/11/07 6:2 p.m.1 views

CVE-2025-12873 Campcodes School File Management update_user.php sql injection

A security flaw has been discovered in Campcodes School File Management 1.0. This affects an unknown part of the file /admin/updateuser.php. Performing manipulation of the argument userid results in sql injection. It is possible to initiate the attack remotely. The exploit has been released to th...

5.8CVSS6.7AI score0.00293EPSS
Exploits1References5
Cvelist
Cvelist
added 2025/11/07 6:2 p.m.8 views

CVE-2025-12873 Campcodes School File Management update_user.php sql injection

A security flaw has been discovered in Campcodes School File Management 1.0. This affects an unknown part of the file /admin/updateuser.php. Performing manipulation of the argument userid results in sql injection. It is possible to initiate the attack remotely. The exploit has been released to th...

5.8CVSS0.00293EPSS
Exploits1References5
EUVD
EUVD
added 2025/11/07 6:2 p.m.2 views

EUVD-2025-38318

A security flaw has been discovered in Campcodes School File Management 1.0. This affects an unknown part of the file /admin/updateuser.php. Performing manipulation of the argument userid results in sql injection. It is possible to initiate the attack remotely. The exploit has been released to th...

5.8CVSS6.5AI score0.00293EPSS
Exploits1References7
CVE
CVE
added 2025/11/07 6:2 p.m.9 views

CVE-2025-12873

CVE-2025-12873 affects Campcodes School File Management 1.0. The vulnerability is in the /admin/update_user.php endpoint and stems from improper handling of the parameter user_id , enabling remote SQL injection. Multiple sources confirm the exploit is public and that attacker-controlled input can...

9.8CVSS6.7AI score0.00293EPSS
Exploits1References5Affected Software1
Positive Technologies
Positive Technologies
added 2025/11/07 12:0 a.m.3 views

PT-2025-45476

Name of the Vulnerable Software and Affected Versions Campcodes School File Management version 1.0 Description A security flaw exists in Campcodes School File Management 1.0. The issue is related to SQL injection, which can be triggered by manipulating the user id argument in the /admin/update...

5.8CVSS7AI score0.00293EPSS
Exploits1References7
CNNVD
CNNVD
added 2025/11/07 12:0 a.m.1 views

CampCodes School File Management SQL注入漏洞

CampCodes School File Management is a school file management system from CampCodes Philippines. A SQL injection vulnerability exists in CampCodes School File Management version 1.0, which stems from an incorrect manipulation of the parameter userid in the file /admin/updateuser.php, which could...

9.8CVSS5.6AI score0.00293EPSS
Exploits1References6
RedhatCVE
RedhatCVE
added 2025/11/04 3:9 a.m.5 views

CVE-2025-12612

A security flaw has been discovered in Campcodes School Fees Payment Management System 1.0. This issue affects some unknown processing of the file /ajax.php?action=deletecourse. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit has been...

9.8CVSS6.4AI score0.00279EPSS
Exploits1References1
OSV
OSV
added 2025/11/03 3:15 a.m.2 views

CVE-2025-12612

A security flaw has been discovered in Campcodes School Fees Payment Management System 1.0. This issue affects some unknown processing of the file /ajax.php?action=deletecourse. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit has been...

9.8CVSS5.8AI score0.00279EPSS
Exploits1References5
NVD
NVD
added 2025/11/03 3:15 a.m.4 views

CVE-2025-12612

A security flaw has been discovered in Campcodes School Fees Payment Management System 1.0. This issue affects some unknown processing of the file /ajax.php?action=deletecourse. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit has been...

9.8CVSS0.00279EPSS
Exploits1References5
Rows per page
Query Builder