CVE-2025-10448: Campcodes Online Job Finder System index.php sql injection

Published Sep 15, 2025

Updated

A flaw has been found in Campcodes Online Job Finder System 1.0. This affects an unknown function of the file /index.php?q=result&searchfor=bycompany. This manipulation of the argument Search causes sql injection. The attack can be initiated remotely. The exploit has been published and may be used.

Affected Software

2 affected components

Campcodes Online Job Finder System

Campcodes Online Job Finder System=1.0

Event History

Sep 15, 2025

CVE Published

via MITRE·02:02 PM

Data Sourced

via MITRE·02:02 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·02:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-10448?

CVE-2025-10448 has a high severity rating due to its potential for remote exploitation via SQL injection.

How do I fix CVE-2025-10448?

To fix CVE-2025-10448, validate and sanitize user inputs in the affected 'searchfor' parameter to prevent SQL injection.

What systems are affected by CVE-2025-10448?

CVE-2025-10448 specifically affects Campcodes Online Job Finder System version 1.0.

Can CVE-2025-10448 be exploited remotely?

Yes, CVE-2025-10448 can be exploited remotely, allowing attackers to manipulate SQL queries.

What type of vulnerability is CVE-2025-10448?

CVE-2025-10448 is an SQL injection vulnerability that allows unauthorized SQL queries to be executed.