CVE-2025-13272: Campcodes School Fees Payment Management System manage_course.php sql injection
A vulnerability was identified in Campcodes School Fees Payment Management System 1.0. Affected is an unknown function of the file /managecourse.php. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit is publicly available and might be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-13272?
CVE-2025-13272 is classified as a high-severity SQL injection vulnerability.
How do I fix CVE-2025-13272?
To fix CVE-2025-13272, it is recommended to sanitize and validate all user inputs in the /manage_course.php file to prevent SQL injection.
Who is affected by CVE-2025-13272?
CVE-2025-13272 affects users of the Campcodes School Fees Payment Management System version 1.0.
Can CVE-2025-13272 be exploited remotely?
Yes, CVE-2025-13272 can be remotely exploited, allowing attackers to manipulate the SQL queries.
What function is involved in CVE-2025-13272?
CVE-2025-13272 involves an unknown function within the /manage_course.php file.