CVE-2025-10817: Campcodes Online Learning Management System admin_user.php sql injection
A weakness has been identified in Campcodes Online Learning Management System 1.0. This vulnerability affects unknown code of the file /admin/adminuser.php. Executing manipulation of the argument firstname can lead to sql injection. The attack may be launched remotely. The exploit has been made available to the public and could be exploited.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-10817?
CVE-2025-10817 is categorized as a critical vulnerability due to its potential for SQL injection, which could allow attackers to manipulate the database.
How do I fix CVE-2025-10817?
To fix CVE-2025-10817, ensure that user input is properly sanitized and use prepared statements for database queries to prevent SQL injection.
Which file is affected by CVE-2025-10817?
CVE-2025-10817 affects the file /admin/admin_user.php in the Campcodes Online Learning Management System.
Can CVE-2025-10817 be exploited remotely?
Yes, CVE-2025-10817 can be exploited remotely, allowing an attacker to execute SQL injection attacks without physical access to the server.
What product is impacted by CVE-2025-10817?
CVE-2025-10817 impacts the Campcodes Online Learning Management System version 1.0.