CVE-2025-10809: Campcodes Online Learning Management System department.php sql injection
A security vulnerability has been detected in Campcodes Online Learning Management System 1.0. The affected element is an unknown function of the file /admin/department.php. Such manipulation of the argument d leads to sql injection. The attack can be executed remotely. The exploit has been disclosed publicly and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-10809?
CVE-2025-10809 is considered a high-severity vulnerability due to its potential for remote SQL injection attacks.
How do I fix CVE-2025-10809?
To mitigate CVE-2025-10809, sanitize all user inputs and implement prepared statements in your SQL queries.
What impact does CVE-2025-10809 have on the Campcodes Online Learning Management System?
CVE-2025-10809 allows attackers to manipulate SQL queries, potentially leading to unauthorized access or data exposure.
Can CVE-2025-10809 be exploited remotely?
Yes, CVE-2025-10809 can be exploited remotely, allowing attackers to execute SQL injection from outside the system.
Which versions of Campcodes Online Learning Management System are affected by CVE-2025-10809?
CVE-2025-10809 affects all versions of Campcodes Online Learning Management System up to and including version 1.0.