CVE-2025-10810: Campcodes Online Learning Management System edit_user.php sql injection
A vulnerability was detected in Campcodes Online Learning Management System 1.0. The impacted element is an unknown function of the file /admin/edituser.php. Performing manipulation of the argument firstname results in sql injection. The attack is possible to be carried out remotely. The exploit is now public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-10810?
CVE-2025-10810 is classified as a high severity vulnerability due to its potential for remote exploitation via SQL injection.
How do I fix CVE-2025-10810?
To fix CVE-2025-10810, sanitize and validate user input in the firstname parameter within the /admin/edit_user.php script to prevent SQL injection.
What software is affected by CVE-2025-10810?
CVE-2025-10810 affects Campcodes Online Learning Management System version 1.0.
Can CVE-2025-10810 be exploited remotely?
Yes, CVE-2025-10810 can be exploited remotely, allowing an attacker to perform SQL injection attacks.
What is SQL injection in the context of CVE-2025-10810?
In the context of CVE-2025-10810, SQL injection refers to the exploitation of insufficient input validation in the firstname argument to execute arbitrary SQL commands.