CVE-2025-11102: Campcodes Online Learning Management System edit_content.php sql injection

Published Sep 28, 2025

Updated

A weakness has been identified in Campcodes Online Learning Management System 1.0. Affected is an unknown function of the file /admin/editcontent.php. Executing manipulation of the argument Title can lead to sql injection. The attack can be launched remotely. The exploit has been made available to the public and could be exploited.

Affected Software

2 affected components

Campcodes Online Learning Management System

Campcodes Online Learning Management System=1.0

Event History

Sep 28, 2025

CVE Published

via MITRE·07:32 AM

Data Sourced

via MITRE·07:32 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·08:15 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-11102?

CVE-2025-11102 has a high severity due to its potential for remote SQL injection attacks.

How do I fix CVE-2025-11102?

To fix CVE-2025-11102, ensure that user inputs in the Title argument are properly sanitized and validated.

What software is affected by CVE-2025-11102?

CVE-2025-11102 affects the Campcodes Online Learning Management System version 1.0.

Can CVE-2025-11102 be exploited remotely?

Yes, CVE-2025-11102 can be exploited remotely by manipulating the Title argument.

What type of attack can CVE-2025-11102 facilitate?

CVE-2025-11102 can facilitate SQL injection attacks, allowing unauthorized access to the database.