CVE-2025-0849: CampCodes School Management Software Staff edit-staff improper authorization
First published: Thu Jan 30 2025(Updated: )
A vulnerability classified as critical has been found in CampCodes School Management Software 1.0. Affected is an unknown function of the file /edit-staff/ of the component Staff Handler. The manipulation leads to improper authorization. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Credit: cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Campcodes School Management Software | ||
| Campcodes School Management Software | =1.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://vuldb.com/?id.294012
- https://vuldb.com/?ctiid.294012
- https://vuldb.com/?submit.487618
- https://github.com/KhukuriRimal/Vulnerabilities/blob/main/Sensitive%20Super%20Admin%20Data%20Exposure%20and%20Unauthorized%20Data%20Update%20via%20IDOR%20(Teacher%20Role%20to%20Super%20Admin%20Role).pdf
- https://www.campcodes.com/
Frequently Asked Questions
What is the severity of CVE-2025-0849?
CVE-2025-0849 is classified as a critical vulnerability.
How do I fix CVE-2025-0849?
To fix CVE-2025-0849, you should update CampCodes School Management Software to the latest patched version.
What type of vulnerability is CVE-2025-0849?
CVE-2025-0849 is an improper authorization vulnerability that allows for remote attacks.
Which component is affected by CVE-2025-0849?
CVE-2025-0849 affects the Staff Handler component found in the /edit-staff/ file.
Can CVE-2025-0849 be exploited remotely?
Yes, CVE-2025-0849 can be exploited remotely by attackers.
- agent/weakness
- agent/references
- agent/title
- agent/author
- agent/source
- agent/type
- agent/first-publish-date
- agent/description
- agent/guess-ai
- agent/software-canonical-lookup
- agent/tags
- collector/mitre-cve
- source/MITRE
- collector/nvd-api
- source/NVD
- agent/severity
- agent/last-modified-date
- agent/softwarecombine
- agent/event
- vendor/campcodes
- canonical/campcodes school management software
- version/campcodes school management software/1.0