CVE-2025-10781: Campcodes Online Learning Management System edit_class.php sql injection

Published Sep 22, 2025

Updated

A vulnerability was identified in Campcodes Online Learning Management System 1.0. This impacts an unknown function of the file /admin/editclass.php. Such manipulation of the argument classname leads to sql injection. The attack can be executed remotely. The exploit is publicly available and might be used.

Affected Software

2 affected components

Campcodes Online Learning Management System

Campcodes Online Learning Management System=1.0

Event History

Sep 22, 2025

CVE Published

via MITRE·04:02 AM

Data Sourced

via MITRE·04:02 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·04:15 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-10781?

CVE-2025-10781 has a high severity due to its potential for remote SQL injection, which can compromise the database.

How do I fix CVE-2025-10781?

To fix CVE-2025-10781, sanitize input data to prevent SQL injection in the /admin/edit_class.php file.

Who is affected by CVE-2025-10781?

CVE-2025-10781 affects users of the Campcodes Online Learning Management System 1.0.

Can CVE-2025-10781 be exploited remotely?

Yes, CVE-2025-10781 can be exploited remotely, allowing attackers to execute malicious SQL queries.

What is the impact of CVE-2025-10781?

The impact of CVE-2025-10781 includes potential unauthorized access to sensitive data within the system's database.