CVE-2025-11062: Campcodes Online Learning Management System save_student.php sql injection

Published Sep 27, 2025

Updated

A vulnerability was determined in Campcodes Online Learning Management System 1.0. This vulnerability affects unknown code of the file /admin/savestudent.php. Executing manipulation of the argument classid can lead to sql injection. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized.

Affected Software

2 affected components

Campcodes Online Learning Management System

Campcodes Online Learning Management System=1.0

Event History

Sep 27, 2025

CVE Published

via MITRE·01:02 PM

Data Sourced

via MITRE·01:02 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·01:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-11062?

CVE-2025-11062 is classified as a high severity vulnerability due to its potential for SQL injection attacks.

How do I fix CVE-2025-11062?

To fix CVE-2025-11062, sanitize user inputs to the class_id parameter and implement prepared statements for database queries.

What systems are affected by CVE-2025-11062?

CVE-2025-11062 affects version 1.0 of Campcodes Online Learning Management System.

What type of vulnerability is CVE-2025-11062?

CVE-2025-11062 is an SQL injection vulnerability.

Can CVE-2025-11062 be exploited remotely?

Yes, CVE-2025-11062 can be exploited remotely, allowing an attacker to potentially manipulate the database.