CVE-2025-11075: Campcodes Online Learning Management System de_activate.php sql injection
A vulnerability has been found in Campcodes Online Learning Management System 1.0. This affects an unknown function of the file /admin/deactivate.php. Such manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-11075?
CVE-2025-11075 is classified as a high-severity vulnerability due to its potential for SQL injection, which can lead to unauthorized access to the database.
How do I fix CVE-2025-11075?
To fix CVE-2025-11075, sanitize and validate input parameters in the /admin/de_activate.php file to prevent SQL injection.
Can CVE-2025-11075 be exploited remotely?
Yes, CVE-2025-11075 can be exploited remotely, allowing attackers to manipulate the ID argument via crafted requests.
What software is affected by CVE-2025-11075?
CVE-2025-11075 affects Campcodes Online Learning Management System version 1.0.
What are the potential impacts of CVE-2025-11075?
The potential impacts of CVE-2025-11075 include data leakage, data manipulation, or complete system compromise through SQL injection attacks.