CVE-2025-0342: CampCodes Computer Laboratory Management System edit cross site scripting

Published Jan 9, 2025

Updated

A vulnerability, which was classified as problematic, was found in CampCodes Computer Laboratory Management System 1.0. This affects an unknown part of the file /class/edit/edit. The manipulation of the argument slname leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.

Affected Software

2 affected components

Campcodes Computer Laboratory Management System=1.0

Campcodes Computer Laboratory Management System

Event History

Jan 9, 2025

CVE Published

via MITRE·07:31 AM

Data Sourced

via MITRE·07:31 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·08:15 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-0342?

CVE-2025-0342 is classified as problematic due to its potential for cross-site scripting attacks.

How do I fix CVE-2025-0342?

To fix CVE-2025-0342, ensure proper input validation and sanitization on the affected argument s_lname in the CampCodes Computer Laboratory Management System.

What software is affected by CVE-2025-0342?

CVE-2025-0342 affects CampCodes Computer Laboratory Management System version 1.0.

What kind of attack can be executed due to CVE-2025-0342?

CVE-2025-0342 allows attackers to perform cross-site scripting (XSS) due to improper handling of user input.

Where is CVE-2025-0342 located in the software?

CVE-2025-0342 is located in the file /class/edit/edit in the CampCodes Computer Laboratory Management System.