CVE-2025-6956: Campcodes Employee Management System changepassemp.php sql injection
Published Jul 1, 2025
·Updated
A vulnerability was found in Campcodes Employee Management System 1.0. It has been classified as critical. This affects an unknown part of the file /changepassemp.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Affected Software
2 affected components
Campcodes Employee Management System
Campcodes Employee Management System=1.0
Event History
Jul 1, 2025
CVE Published
via MITRE·02:02 PM
Data Sourced
via MITRE·02:02 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·02:15 PM
DescriptionSeverityWeaknessAffected Software
Jun 13, 58473
Event
via NVD·09:06 AM
Frequently Asked Questions
1
What is the severity of CVE-2025-6956?
CVE-2025-6956 is classified as a critical severity vulnerability.
2
What type of vulnerability is CVE-2025-6956?
CVE-2025-6956 is classified as an SQL injection vulnerability.
3
How does CVE-2025-6956 affect the Campcodes Employee Management System?
CVE-2025-6956 allows remote attackers to exploit the vulnerability through manipulation of the argument ID in the /changepassemp.php file.
4
How do I fix CVE-2025-6956?
To fix CVE-2025-6956, sanitize and validate all user inputs, particularly those used in SQL queries.
5
Is CVE-2025-6956 remotely exploitable?
Yes, CVE-2025-6956 can be exploited remotely.