CVE-2025-0849: CampCodes School Management Software Staff edit-staff improper authorization
First published: Thu Jan 30 2025(Updated: )
A vulnerability classified as critical has been found in CampCodes School Management Software 1.0. Affected is an unknown function of the file /edit-staff/ of the component Staff Handler. The manipulation leads to improper authorization. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Credit: cna@vuldb.com
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://vuldb.com/?id.294012
- https://vuldb.com/?ctiid.294012
- https://vuldb.com/?submit.487618
- https://github.com/KhukuriRimal/Vulnerabilities/blob/main/Sensitive%20Super%20Admin%20Data%20Exposure%20and%20Unauthorized%20Data%20Update%20via%20IDOR%20(Teacher%20Role%20to%20Super%20Admin%20Role).pdf
- https://www.campcodes.com/
- collector/mitre-cve
- source/MITRE
- collector/nvd-api
- source/NVD
- agent/weakness
- agent/severity
- agent/references
- agent/title
- agent/last-modified-date
- agent/author
- agent/source
- agent/tags
- agent/type
- agent/first-publish-date
- agent/description
- agent/event