CVE-2025-8950: Campcodes Online Recruitment Management System index.php sql injection
A vulnerability was identified in Campcodes Online Recruitment Management System 1.0. This issue affects some unknown processing of the file /Recruitment/index.php?page=viewvacancy. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-8950?
CVE-2025-8950 has been classified as a high severity SQL injection vulnerability.
How do I fix CVE-2025-8950?
To fix CVE-2025-8950, it is recommended to sanitize user inputs and implement prepared statements in database queries.
What types of attacks can be performed through CVE-2025-8950?
CVE-2025-8950 allows attackers to execute arbitrary SQL queries, potentially leading to data leakage or modification.
Which software is affected by CVE-2025-8950?
CVE-2025-8950 affects Campcodes Online Recruitment Management System version 1.0.
Can CVE-2025-8950 be exploited remotely?
Yes, CVE-2025-8950 can be exploited remotely by manipulating the argument ID in the affected URL.