CVE-2025-6954: Campcodes Employee Management System applyleave.php sql injection
A vulnerability has been found in Campcodes Employee Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /applyleave.php. The manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-6954?
CVE-2025-6954 is classified as a critical vulnerability.
How does CVE-2025-6954 manifest in the Campcodes Employee Management System?
CVE-2025-6954 allows for SQL injection through manipulation of the argument ID in the /applyleave.php file.
Can CVE-2025-6954 be exploited remotely?
Yes, CVE-2025-6954 can be exploited remotely by attackers.
What software versions are affected by CVE-2025-6954?
CVE-2025-6954 affects Campcodes Employee Management System version 1.0.
What steps should be taken to remediate CVE-2025-6954?
To fix CVE-2025-6954, ensure proper input validation and use prepared statements for database queries in the affected file.