CVE-2025-10444: Campcodes Online Job Finder System advancesearch.php sql injection
A security flaw has been discovered in Campcodes Online Job Finder System 1.0. This issue affects some unknown processing of the file /advancesearch.php. Performing manipulation of the argument Username results in sql injection. The attack is possible to be carried out remotely. The exploit has been released to the public and may be exploited.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-10444?
CVE-2025-10444 is categorized as a high-severity vulnerability due to its potential for remote SQL injection attacks.
How do I fix CVE-2025-10444?
To fix CVE-2025-10444, validate and sanitize user inputs in the /advancesearch.php file to prevent SQL injection.
What systems are affected by CVE-2025-10444?
CVE-2025-10444 affects version 1.0 of Campcodes Online Job Finder System.
Can CVE-2025-10444 be exploited remotely?
Yes, CVE-2025-10444 can be exploited remotely through manipulation of the Username parameter.
What types of attacks can CVE-2025-10444 lead to?
CVE-2025-10444 can lead to unauthorized access to the database and exposure of sensitive information through SQL injection.