CVE-2025-13555: Campcodes School File Management System Login index.php sql injection
A vulnerability was detected in Campcodes School File Management System 1.0. Affected is an unknown function of the file /index.php of the component Login. Performing a manipulation of the argument studno results in sql injection. The attack can be initiated remotely. The exploit is now public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-13555?
CVE-2025-13555 has a high severity level due to its potential exploitation through SQL injection.
How do I fix CVE-2025-13555?
To fix CVE-2025-13555, ensure input validation and use parameterized queries to prevent SQL injection.
What component is affected in CVE-2025-13555?
CVE-2025-13555 affects the Login component of the Campcodes School File Management System.
Can the CVE-2025-13555 vulnerability be exploited remotely?
Yes, the CVE-2025-13555 vulnerability can be exploited remotely by attackers.
What kind of attack is associated with CVE-2025-13555?
CVE-2025-13555 is associated with SQL injection attacks through manipulation of the stud_no argument.