CVE-2025-6962: Campcodes Employee Management System myprofileup.php sql injection
Published Jul 1, 2025
·Updated
A vulnerability, which was classified as critical, was found in Campcodes Employee Management System 1.0. This affects an unknown part of the file /myprofileup.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Affected Software
2 affected components
Campcodes Employee Management System
Campcodes Employee Management System=1.0
Event History
Jul 1, 2025
CVE Published
via MITRE·03:32 PM
Data Sourced
via MITRE·03:32 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·04:15 PM
DescriptionSeverityWeaknessAffected Software
Jun 15, 58473
Event
via NVD·12:47 PM
Frequently Asked Questions
1
What is the severity of CVE-2025-6962?
CVE-2025-6962 is classified as a critical vulnerability.
2
What type of vulnerability is CVE-2025-6962?
CVE-2025-6962 is a SQL injection vulnerability.
3
How do I fix CVE-2025-6962?
To fix CVE-2025-6962, implement input validation to sanitize the ID parameter in the /myprofileup.php file.
4
Can CVE-2025-6962 be exploited remotely?
Yes, CVE-2025-6962 can be exploited remotely.
5
What software is affected by CVE-2025-6962?
CVE-2025-6962 affects Campcodes Employee Management System version 1.0.