CVE-2025-8334: Campcodes Online Recruitment Management System ajax.php sql injection
A vulnerability was found in Campcodes Online Recruitment Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/ajax.php?action=deleterecruitmentstatus. The manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-8334?
CVE-2025-8334 has been rated as critical.
What is the nature of the vulnerability in CVE-2025-8334?
CVE-2025-8334 is an SQL injection vulnerability affecting the /admin/ajax.php?action=delete_recruitment_status functionality.
How does the SQL injection in CVE-2025-8334 occur?
The SQL injection in CVE-2025-8334 occurs due to improper handling of the ID parameter in the affected script.
How can organizations fix CVE-2025-8334?
Organizations can fix CVE-2025-8334 by properly sanitizing and validating the input to the ID parameter before using it in SQL queries.
Which software is affected by CVE-2025-8334?
CVE-2025-8334 affects the Campcodes Online Recruitment Management System version 1.0.