CVE-2025-13057: Campcodes School Fees Payment Management System ajax.php sql injection
A vulnerability was identified in Campcodes School Fees Payment Management System 1.0. Impacted is an unknown function of the file /ajax.php?action=savestudent. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit is publicly available and might be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-13057?
CVE-2025-13057 is considered a high-severity vulnerability due to its potential for remote SQL injection.
How do I fix CVE-2025-13057?
To fix CVE-2025-13057, sanitize and validate all input parameters for the /ajax.php?action=save_student function to prevent SQL injection.
Which software is affected by CVE-2025-13057?
CVE-2025-13057 affects Campcodes School Fees Payment Management System version 1.0.
Can CVE-2025-13057 be exploited remotely?
Yes, CVE-2025-13057 can be exploited remotely which increases its risk factor significantly.
What type of vulnerability is CVE-2025-13057?
CVE-2025-13057 is classified as an SQL injection vulnerability.