Campcodes Online Loan Management System vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Campcodes Online Loan Management System: 2 record(s), with affected versions and fixes.cpe:2.3:a:campcodes:online_loan_management_system
CVE-2025-9744
Critical · 9.8
CWE-89 Aug 31, 2025
Campcodes Online Loan Management System ajax.php sql injection
A weakness has been identified in Campcodes Online Loan Management System 1.0. The affected element is an unknown function of the file /ajax.php?action=login. Executing manipulation of the argument Username can lead to sql injection. The attack can be launched remotely. The exploit has been made available to the public and could be exploited.
CVE-2025-9678
Critical · 9.8
CWE-74 Aug 29, 2025
Campcodes Online Loan Management System ajax.php sql injection
A weakness has been identified in Campcodes Online Loan Management System 1.0. The impacted element is an unknown function of the file /ajax.php?action=delete_borrower. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be exploited.