Vulnerabilidades do Campcodes School File Management System
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Campcodes School File Management System: 4 registro(s), com versões afetadas e correções.cpe:2.3:a:campcodes:school_file_management_system
CVE-2025-15404
Alta · 8.8
CWE-434 01/01/2026
campcodes School File Management System save_file.php unrestricted upload
A security vulnerability has been detected in campcodes School File Management System 1.0. The affected element is an unknown function of the file /save_file.php. The manipulation of the argument File leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used.
CVE-2025-14209
Crítica · 9.8
CWE-89 07/12/2025
Campcodes School File Management System update_query.php sql injection
A weakness has been identified in Campcodes School File Management System 1.0. This impacts an unknown function of the file /update_query.php. This manipulation of the argument stud_id causes sql injection. The attack can be initiated remotely. The exploit has been made available to the public and could be used for attacks.
CVE-2025-13555
Crítica · 9.8
CWE-89 23/11/2025
Campcodes School File Management System Login index.php sql injection
A vulnerability was detected in Campcodes School File Management System 1.0. Affected is an unknown function of the file /index.php of the component Login. Performing a manipulation of the argument stud_no results in sql injection. The attack can be initiated remotely. The exploit is now public and may be used.
CVE-2025-12873
Crítica · 9.8
CWE-89 07/11/2025
Campcodes School File Management update_user.php sql injection
A security flaw has been discovered in Campcodes School File Management 1.0. This affects an unknown part of the file /admin/update_user.php. Performing manipulation of the argument user_id results in sql injection. It is possible to initiate the attack remotely. The exploit has been released to the public and may be exploited.