CVE-2025-6957

Campcodes Employee Management System 1.0 has a SQL injection in /process/eprocess.php caused by manipulating the mailuid parameter. Remote exploitation is possible, and public PoC/exploit information exists. The vulnerability is described as critical/high depending on source, with impact on confi...