Campcodes School File Management System vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Campcodes School File Management System: 4 record(s), with affected versions and fixes.cpe:2.3:a:campcodes:school_file_management_system
CVE-2025-15404
High · 8.8
CWE-434 Jan 1, 2026
campcodes School File Management System save_file.php unrestricted upload
A security vulnerability has been detected in campcodes School File Management System 1.0. The affected element is an unknown function of the file /save_file.php. The manipulation of the argument File leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used.
CVE-2025-14209
Critical · 9.8
CWE-89 Dec 7, 2025
Campcodes School File Management System update_query.php sql injection
A weakness has been identified in Campcodes School File Management System 1.0. This impacts an unknown function of the file /update_query.php. This manipulation of the argument stud_id causes sql injection. The attack can be initiated remotely. The exploit has been made available to the public and could be used for attacks.
CVE-2025-13555
Critical · 9.8
CWE-89 Nov 23, 2025
Campcodes School File Management System Login index.php sql injection
A vulnerability was detected in Campcodes School File Management System 1.0. Affected is an unknown function of the file /index.php of the component Login. Performing a manipulation of the argument stud_no results in sql injection. The attack can be initiated remotely. The exploit is now public and may be used.
CVE-2025-12873
Critical · 9.8
CWE-89 Nov 7, 2025
Campcodes School File Management update_user.php sql injection
A security flaw has been discovered in Campcodes School File Management 1.0. This affects an unknown part of the file /admin/update_user.php. Performing manipulation of the argument user_id results in sql injection. It is possible to initiate the attack remotely. The exploit has been released to the public and may be exploited.