CVE-2025-7131: Campcodes Payroll Management System ajax.php sql injection
A vulnerability was found in Campcodes Payroll Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /ajax.php?action=saveemployeeattendance. The manipulation of the argument employeeid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-7131?
CVE-2025-7131 is classified as a critical vulnerability.
How do I fix CVE-2025-7131?
To fix CVE-2025-7131, ensure that all SQL queries involving the employee_id parameter are sanitized and parameterized to prevent SQL injection.
What is the impact of CVE-2025-7131?
The impact of CVE-2025-7131 includes the potential for unauthorized database access and manipulation due to SQL injection.
Which software is affected by CVE-2025-7131?
CVE-2025-7131 affects the Campcodes Payroll Management System version 1.0.
What component is vulnerable in CVE-2025-7131?
The vulnerable component in CVE-2025-7131 is the /ajax.php?action=save_employee_attendance functionality.