CVE-2025-11064: Campcodes Online Learning Management System teachers.php sql injection
A security flaw has been discovered in Campcodes Online Learning Management System 1.0. Impacted is an unknown function of the file /admin/teachers.php. The manipulation of the argument department results in sql injection. It is possible to launch the attack remotely. The exploit has been released to the public and may be exploited.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-11064?
CVE-2025-11064 is rated as a critical vulnerability due to its potential for remote SQL injection attacks.
How do I fix CVE-2025-11064?
To mitigate CVE-2025-11064, ensure that input sanitization is implemented for the 'department' argument in the /admin/teachers.php file.
What systems are affected by CVE-2025-11064?
CVE-2025-11064 affects Campcodes Online Learning Management System version 1.0.
Can CVE-2025-11064 be exploited remotely?
Yes, CVE-2025-11064 can be exploited remotely, allowing attackers to execute SQL injection attacks.
What should I do if I am vulnerable to CVE-2025-11064?
If you are vulnerable to CVE-2025-11064, it is recommended to apply patches or update to a fixed version of Campcodes Online Learning Management System immediately.