CVE-2025-10782: Campcodes Online Learning Management System class.php sql injection

Published Sep 22, 2025

Updated

A security flaw has been discovered in Campcodes Online Learning Management System 1.0. Affected is an unknown function of the file /admin/class.php. Performing manipulation of the argument classname results in sql injection. The attack is possible to be carried out remotely. The exploit has been released to the public and may be exploited.

Affected Software

2 affected components

Campcodes Online Learning Management System

Campcodes Online Learning Management System=1.0

Event History

Sep 22, 2025

CVE Published

via MITRE·04:32 AM

Data Sourced

via MITRE·04:32 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·05:15 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-10782?

CVE-2025-10782 has a high severity rating due to the potential for remote SQL injection.

How do I fix CVE-2025-10782?

To fix CVE-2025-10782, sanitize and validate user inputs in the affected function of the /admin/class.php file.

What systems are affected by CVE-2025-10782?

CVE-2025-10782 affects Campcodes Online Learning Management System version 1.0.

Can CVE-2025-10782 be exploited remotely?

Yes, CVE-2025-10782 can be exploited remotely, allowing attackers to manipulate the argument class_name.

What kind of attack is possible with CVE-2025-10782?

CVE-2025-10782 enables SQL injection attacks, posing a risk to the integrity of the database.