CVE-2025-14668: campcodes Advanced Online Examination System loginExe.php sql injection
A vulnerability was detected in campcodes Advanced Online Examination System 1.0. This affects an unknown function of the file /query/loginExe.php. Performing a manipulation of the argument Username results in sql injection. It is possible to initiate the attack remotely. The exploit is now public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-14668?
CVE-2025-14668 has a high severity rating due to its potential for SQL injection, which can lead to unauthorized access to sensitive data.
How do I fix CVE-2025-14668?
To remediate CVE-2025-14668, sanitize and validate all user inputs in the login functionality to prevent SQL injection attacks.
What systems are affected by CVE-2025-14668?
CVE-2025-14668 affects version 1.0 of the Campcodes Advanced Online Examination System.
Can CVE-2025-14668 be exploited remotely?
Yes, CVE-2025-14668 can be exploited remotely through the vulnerable login functionality.
What type of attack does CVE-2025-14668 enable?
CVE-2025-14668 enables SQL injection attacks, allowing attackers to manipulate database queries.