CVE-2025-10848: Campcodes Society Membership Information System check_student.php sql injection
A vulnerability was identified in Campcodes Society Membership Information System 1.0. This issue affects some unknown processing of the file /checkstudent.php. Such manipulation of the argument studentid leads to sql injection. The attack may be performed from remote. The exploit is publicly available and might be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-10848?
CVE-2025-10848 is classified as a high-severity vulnerability due to its potential for remote SQL injection attacks.
How do I fix CVE-2025-10848?
To fix CVE-2025-10848, validate and sanitize input for the student_id parameter in the /check_student.php file to prevent SQL injection.
What is the impact of CVE-2025-10848?
The impact of CVE-2025-10848 can lead to unauthorized access to sensitive data and manipulation of the database.
Which software is affected by CVE-2025-10848?
CVE-2025-10848 affects Campcodes Society Membership Information System version 1.0.
Can CVE-2025-10848 be exploited remotely?
Yes, CVE-2025-10848 can be exploited remotely through manipulation of the student_id parameter.