CVE-2025-0210: Campcodes School Faculty Scheduling System ajax.php sql injection

Published Jan 4, 2025

Updated

A vulnerability has been found in Campcodes School Faculty Scheduling System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/ajax.php?action=login. The manipulation of the argument username leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

Affected Software

1 affected component

Campcodes School Faculty Scheduling System=1.0

Event History

Jan 4, 2025

CVE Published

via MITRE·02:00 PM

Data Sourced

via MITRE·02:00 PM

DescriptionSeverityWeakness

Oct 12, 57005

Event

via FIRST·08:45 AM

Frequently Asked Questions

What is the severity of CVE-2025-0210?

CVE-2025-0210 is classified as a critical vulnerability.

How do I fix CVE-2025-0210?

To fix CVE-2025-0210, update the Campcodes School Faculty Scheduling System to a patched version that addresses the SQL injection vulnerability.

What functionality is affected by CVE-2025-0210?

CVE-2025-0210 affects the login functionality found in the file /admin/ajax.php.

What type of vulnerability is CVE-2025-0210?

CVE-2025-0210 is a SQL injection vulnerability.

What is the affected software for CVE-2025-0210?

The affected software for CVE-2025-0210 is Campcodes School Faculty Scheduling System version 1.0.