CVE-2025-6422: Campcodes Online Recruitment Management System About Content Page ajax.php unrestricted upload
A vulnerability classified as critical was found in Campcodes Online Recruitment Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/ajax.php?action=savesettings of the component About Content Page. The manipulation of the argument img leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-6422?
CVE-2025-6422 is classified as a critical severity vulnerability.
What component is affected by CVE-2025-6422?
CVE-2025-6422 affects the /admin/ajax.php?action=save_settings functionality of the Campcodes Online Recruitment Management System.
How can I determine if my installation is vulnerable to CVE-2025-6422?
To determine if your installation is vulnerable to CVE-2025-6422, check if you are using Campcodes Online Recruitment Management System version 1.0 and investigate the specific settings in the affected component.
How do I fix CVE-2025-6422?
To fix CVE-2025-6422, update to the latest version of Campcodes Online Recruitment Management System that addresses this vulnerability.
What type of attack can exploit CVE-2025-6422?
CVE-2025-6422 can potentially be exploited for unauthorized access or manipulation of settings within the Campcodes Online Recruitment Management System.