CVE-2025-6957: Campcodes Employee Management System eprocess.php sql injection
A vulnerability was found in Campcodes Employee Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /process/eprocess.php. The manipulation of the argument mailuid leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-6957?
CVE-2025-6957 has been declared as critical due to its potential for remote SQL injection attacks.
How do I fix CVE-2025-6957?
To fix CVE-2025-6957, sanitize all input parameters, especially those passed to /process/eprocess.php, to prevent SQL injection.
What type of vulnerability is CVE-2025-6957?
CVE-2025-6957 is an SQL injection vulnerability that allows remote attackers to manipulate the database.
Which software is affected by CVE-2025-6957?
CVE-2025-6957 affects the Campcodes Employee Management System version 1.0.
Can CVE-2025-6957 be exploited remotely?
Yes, CVE-2025-6957 can be exploited remotely by submitting crafted requests to the affected system.