CVE-2025-14209: Campcodes School File Management System update_query.php sql injection
A weakness has been identified in Campcodes School File Management System 1.0. This impacts an unknown function of the file /updatequery.php. This manipulation of the argument studid causes sql injection. The attack can be initiated remotely. The exploit has been made available to the public and could be used for attacks.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-14209?
CVE-2025-14209 has been classified as a high-severity vulnerability due to its potential for remote exploitation via SQL injection.
How do I fix CVE-2025-14209?
To mitigate CVE-2025-14209, implement input validation and parameterized queries in the update_query.php function to prevent SQL injection.
What systems are affected by CVE-2025-14209?
CVE-2025-14209 affects Campcodes School File Management System version 1.0.
Can CVE-2025-14209 be exploited remotely?
Yes, CVE-2025-14209 can be exploited remotely, making it critical to address the vulnerability promptly.
What type of attack does CVE-2025-14209 involve?
CVE-2025-14209 involves an SQL injection attack, which manipulates the stud_id argument in the application.