CVE-2025-9788: SourceCodester/Campcodes School Log Management System admin_class.php sql injection
A vulnerability was determined in SourceCodester/Campcodes School Log Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/adminclass.php. Executing manipulation of the argument idno can lead to sql injection. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-9788?
CVE-2025-9788 is classified as a high severity vulnerability due to its potential for SQL injection attacks.
How do I fix CVE-2025-9788?
To fix CVE-2025-9788, sanitize and validate the input for the 'id_no' parameter in the /admin/admin_class.php file.
What type of vulnerability is CVE-2025-9788?
CVE-2025-9788 is an SQL injection vulnerability that allows attackers to manipulate database queries.
Which software is affected by CVE-2025-9788?
CVE-2025-9788 affects SourceCodester's Campcodes School Log Management System version 1.0.
What are the potential impacts of exploiting CVE-2025-9788?
Exploiting CVE-2025-9788 could lead to unauthorized access to sensitive data stored in the database.