CVE-2025-10825: Campcodes Online Beauty Parlor Management System view-appointment.php sql injection

Published Sep 23, 2025

Updated

A vulnerability was identified in Campcodes Online Beauty Parlor Management System 1.0. Affected is an unknown function of the file /admin/view-appointment.php. The manipulation of the argument viewid leads to sql injection. The attack can be initiated remotely. The exploit is publicly available and might be used.

Affected Software

2 affected components

Campcodes Online Beauty Parlor Management System

Campcodes Online Beauty Parlor Management System=1.0

Event History

Sep 23, 2025

CVE Published

via MITRE·12:02 AM

Data Sourced

via MITRE·12:02 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·01:15 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-10825?

CVE-2025-10825 is classified as a high-severity SQL injection vulnerability.

How does CVE-2025-10825 affect the Campcodes Online Beauty Parlor Management System?

CVE-2025-10825 allows remote attackers to manipulate the 'viewid' argument in the /admin/view-appointment.php file, leading to potential SQL injection.

How can I fix CVE-2025-10825?

To fix CVE-2025-10825, sanitize and validate all user inputs, particularly the 'viewid' parameter in the affected PHP file.

What is the potential impact of CVE-2025-10825?

The impact of CVE-2025-10825 can include unauthorized access to the database, retrieval of sensitive information, or potential system compromise.

Is CVE-2025-10825 publicly exploitable?

Yes, CVE-2025-10825 is publicly exploitable, allowing attackers to initiate the exploit remotely.