CVE-2025-9920: Campcodes Recruitment Management System index.php include file inclusion
A security flaw has been discovered in Campcodes Recruitment Management System 1.0. This impacts the function include of the file /admin/index.php. The manipulation of the argument page results in file inclusion. It is possible to launch the attack remotely. The exploit has been released to the public and may be exploited.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-9920?
CVE-2025-9920 is classified as a high severity vulnerability due to the potential for remote file inclusion attacks.
How do I fix CVE-2025-9920?
To fix CVE-2025-9920, update the Campcodes Recruitment Management System to the latest version and ensure proper input validation for the 'page' parameter.
What type of attack does CVE-2025-9920 enable?
CVE-2025-9920 enables remote file inclusion attacks, allowing attackers to execute arbitrary files on the server.
Which version of the Campcodes Recruitment Management System is affected by CVE-2025-9920?
CVE-2025-9920 affects version 1.0 of the Campcodes Recruitment Management System.
Can CVE-2025-9920 be exploited remotely?
Yes, CVE-2025-9920 can be exploited remotely, making it critical for affected users to take immediate action.