CVE-2025-10783: Campcodes Online Learning Management System add_subject.php sql injection

Published Sep 22, 2025

Updated

A weakness has been identified in Campcodes Online Learning Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/addsubject.php. Executing manipulation of the argument subjectcode can lead to sql injection. The attack may be performed from remote. The exploit has been made available to the public and could be exploited.

Affected Software

2 affected components

Campcodes Online Learning Management System

Campcodes Online Learning Management System=1.0

Event History

Sep 22, 2025

CVE Published

via MITRE·05:02 AM

Data Sourced

via MITRE·05:02 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·05:15 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-10783?

CVE-2025-10783 has been classified as a high-severity vulnerability due to its potential for SQL injection attacks.

How do I fix CVE-2025-10783?

To fix CVE-2025-10783, validate and sanitize all user inputs in the /admin/add_subject.php file to prevent SQL injection.

What systems are affected by CVE-2025-10783?

CVE-2025-10783 affects Campcodes Online Learning Management System version 1.0.

What type of vulnerability is CVE-2025-10783?

CVE-2025-10783 is an SQL injection vulnerability that allows attackers to manipulate database queries.

Can CVE-2025-10783 be exploited remotely?

Yes, CVE-2025-10783 can be exploited remotely by manipulating the subject_code parameter.