CVE-2025-7130: Campcodes Payroll Management System ajax.php sql injection
Published Jul 7, 2025
·Updated
A vulnerability was found in Campcodes Payroll Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /ajax.php?action=deletepayroll. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Affected Software
2 affected components
Campcodes Payroll Management System
Campcodes Payroll Management System=1.0
Event History
Jul 7, 2025
CVE Published
via MITRE·01:32 PM
Data Sourced
via MITRE·01:32 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·02:15 PM
DescriptionSeverityWeaknessAffected Software
Jun 13, 58473
Event
via NVD·03:54 PM
Frequently Asked Questions
1
What is the severity of CVE-2025-7130?
CVE-2025-7130 has been classified as critical.
2
How do I fix CVE-2025-7130?
To fix CVE-2025-7130, you should sanitize user inputs and implement prepared statements to prevent SQL injection.
3
What software is affected by CVE-2025-7130?
CVE-2025-7130 affects Campcodes Payroll Management System version 1.0.
4
What type of vulnerability is CVE-2025-7130?
CVE-2025-7130 is a SQL injection vulnerability.
5
What component of the software is vulnerable in CVE-2025-7130?
The vulnerable component in CVE-2025-7130 is the file /ajax.php with the action delete_payroll.