CVE-2025-9504: Campcodes Online Loan Management System ajax.php sql injection
A vulnerability was detected in Campcodes Online Loan Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /ajax.php?action=saveplan. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit is now public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-9504?
CVE-2025-9504 has a high severity rating due to its potential for remote SQL injection attacks.
How do I fix CVE-2025-9504?
To fix CVE-2025-9504, ensure proper input validation and parameterized queries are implemented for the affected action in /ajax.php.
What type of vulnerability is CVE-2025-9504?
CVE-2025-9504 is classified as an SQL injection vulnerability affecting Campcodes Online Loan Management System.
Can CVE-2025-9504 be exploited remotely?
Yes, CVE-2025-9504 can be exploited remotely, allowing attackers to manipulate the database through the vulnerable endpoint.
What software is affected by CVE-2025-9504?
CVE-2025-9504 affects Campcodes Online Loan Management System version 1.0.