CVE-2025-13271: Campcodes School Fees Payment Management System ajax.php sql injection
A vulnerability was determined in Campcodes School Fees Payment Management System 1.0. This impacts an unknown function of the file /ajax.php?action=login. This manipulation of the argument Username causes sql injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-13271?
CVE-2025-13271 is considered a high severity vulnerability due to its potential for SQL injection attacks.
How do I fix CVE-2025-13271?
To fix CVE-2025-13271, ensure proper input validation and use parameterized queries in the login function of the /ajax.php file.
What systems are affected by CVE-2025-13271?
CVE-2025-13271 impacts the Campcodes School Fees Payment Management System version 1.0.
Can CVE-2025-13271 be exploited remotely?
Yes, CVE-2025-13271 can be exploited remotely by manipulating the Username argument in the login function.
What type of attack is associated with CVE-2025-13271?
CVE-2025-13271 is associated with SQL injection attacks, which can result in unauthorized access to the database.