CVE-2025-11061: Campcodes Online Learning Management System edit_student.php sql injection

Published Sep 27, 2025

Updated

A vulnerability was found in Campcodes Online Learning Management System 1.0. This affects an unknown part of the file /admin/editstudent.php. Performing manipulation of the argument cys results in sql injection. The attack is possible to be carried out remotely. The exploit has been made public and could be used.

Affected Software

2 affected components

Campcodes Online Learning Management System

Campcodes Online Learning Management System=1.0

Event History

Sep 27, 2025

CVE Published

via MITRE·12:32 PM

Data Sourced

via MITRE·12:32 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·01:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-11061?

CVE-2025-11061 is considered a high-severity vulnerability due to the potential for remote SQL injection.

How do I fix CVE-2025-11061?

To fix CVE-2025-11061, sanitize and validate all input parameters in the edit_student.php file to prevent SQL injection attacks.

What systems are affected by CVE-2025-11061?

CVE-2025-11061 affects the Campcodes Online Learning Management System version 1.0.

Can CVE-2025-11061 be exploited remotely?

Yes, CVE-2025-11061 can be exploited remotely by manipulating the 'cys' argument.

What type of vulnerability is CVE-2025-11061?

CVE-2025-11061 is an SQL injection vulnerability that allows attackers to execute arbitrary SQL queries.