Campcodes vulnerabilities
630 vulnerabilities
Known vulnerabilities in Campcodes products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 80 products.
Products
50 of 80- Complete Web Based School Management System104 vulnerabilities
- Sales And Inventory System39 vulnerabilities
- Online Job Finder System23 vulnerabilities
- Beauty Salon Management System21 vulnerabilities
- Online Hospital Management System21 vulnerabilities
- Online Learning Management System21 vulnerabilities
- Advanced Online Voting System20 vulnerabilities
- Supplier Management System19 vulnerabilities
- Online Examination System16 vulnerabilities
- Grocery Sales And Inventory System15 vulnerabilities
- Legal Case Management System15 vulnerabilities
- Retro Basketball Shoes Online Store15 vulnerabilities
- Online Recruitment Management System13 vulnerabilities
- Online Shopping Portal12 vulnerabilities
- Payroll Management System11 vulnerabilities
- Complete Online Beauty Parlor Management System10 vulnerabilities
- Computer Sales And Inventory System10 vulnerabilities
- Courier Management System10 vulnerabilities
- Employee Management System10 vulnerabilities
- Online Beauty Parlor Management System10 vulnerabilities
- Online Laundry Management System10 vulnerabilities
- Church Management System9 vulnerabilities
- Complete Online Dj Booking System9 vulnerabilities
- Online Loan Management System9 vulnerabilities
- Online Marriage Registration System9 vulnerabilities
- Simple Student Information System9 vulnerabilities
- Coffee Shop POS System8 vulnerabilities
- Online Food Ordering System8 vulnerabilities
- School Fees Payment Management System8 vulnerabilities
- Online College Library System7 vulnerabilities
- Online Movie Theater Seat Reservation System7 vulnerabilities
- School Management Software7 vulnerabilities
- Complete Online Student Management System6 vulnerabilities
- Cyber Cafe Management System6 vulnerabilities
- House Rental Management System6 vulnerabilities
- Online Apartment Visitor Management System6 vulnerabilities
- Online Student Management System6 vulnerabilities
- Online Thesis Archiving System6 vulnerabilities
- Advanced Online Voting Management System5 vulnerabilities
- Complaint Management System5 vulnerabilities
- Hospital Management System5 vulnerabilities
- Online Event Management System5 vulnerabilities
- Online Hotel Reservation System5 vulnerabilities
- Online Teacher Record Management System5 vulnerabilities
- Online Traffic Offense Management System5 vulnerabilities
- Retro Cellphone Online Store5 vulnerabilities
- School Log Management System5 vulnerabilities
- Farm Management System4 vulnerabilities
- Online Water Billing System4 vulnerabilities
- School File Management System4 vulnerabilities
CVE-2025-63719campcodesonline_hospital_management_system
EPSS score0.22%
Campcodes Online Hospital Management System 1.0 is vulnerable to SQL Injection in /admin/index.php via the parameter username.CVE-2025-13557campcodesonline_polling_systemEPSS score0.39%
A vulnerability has been found in Campcodes Online Polling System 1.0. Affected by this issue is some unknown functionality of the file /registeracc.php. The manipulation of the argument email leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.CVE-2025-13269campcodesschool_fees_payment_management_systemEPSS score0.34%
A vulnerability has been found in Campcodes School Fees Payment Management System 1.0. The impacted element is an unknown function of the file /ajax.php?action=save_payment. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.CVE-2025-13412campcodesretro_basketball_shoes_online_storeEPSS score0.27%
A vulnerability was determined in Campcodes Retro Basketball Shoes Online Store 1.0. Affected by this issue is some unknown functionality of the file /admin/admin_running.php. Executing a manipulation of the argument product_name can lead to cross site scripting. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized.CVE-2025-13260campcodessupplier_management_systemEPSS score0.34%
A vulnerability has been found in Campcodes Supplier Management System 1.0. This impacts an unknown function of the file /manufacturer/edit_product.php. Such manipulation of the argument cmbProductUnit leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.CVE-2025-13423campcodesretro_basketball_shoes_online_storeEPSS score0.37%
A flaw has been found in Campcodes Retro Basketball Shoes Online Store 1.0. The impacted element is an unknown function of the file /admin/admin_product.php. Executing a manipulation of the argument product_image can lead to unrestricted upload. The attack may be launched remotely. The exploit has been published and may be used.CVE-2025-13554campcodessupplier_management_systemEPSS score0.39%
A security vulnerability has been detected in Campcodes Supplier Management System 1.0. This impacts an unknown function of the file /index.php of the component Login. Such manipulation of the argument txtUsername leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used.CVE-2025-13273campcodesschool_fees_payment_management_systemEPSS score0.34%
A security flaw has been discovered in Campcodes School Fees Payment Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /ajax.php?action=delete_payment. Performing a manipulation of the argument ID results in sql injection. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks.CVE-2025-13411campcodesretro_basketball_shoes_online_storeEPSS score0.39%
A vulnerability was found in Campcodes Retro Basketball Shoes Online Store 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/admin_football.php. Performing a manipulation of the argument product_image results in unrestricted upload. The attack is possible to be carried out remotely. The exploit has been made public and could be used.CVE-2025-13555campcodesschool_file_management_systemEPSS score0.39%
A vulnerability was detected in Campcodes School File Management System 1.0. Affected is an unknown function of the file /index.php of the component Login. Performing a manipulation of the argument stud_no results in sql injection. The attack can be initiated remotely. The exploit is now public and may be used.CVE-2025-13259campcodessupplier_management_systemEPSS score0.34%
A flaw has been found in Campcodes Supplier Management System 1.0. This affects an unknown function of the file /manufacturer/edit_unit.php. This manipulation of the argument ID causes sql injection. The attack may be initiated remotely. The exploit has been published and may be used.CVE-2025-13057campcodesschool_fees_payment_management_systemEPSS score0.35%
A vulnerability was identified in Campcodes School Fees Payment Management System 1.0. Impacted is an unknown function of the file /ajax.php?action=save_student. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit is publicly available and might be used.CVE-2025-13274campcodesschool_fees_payment_management_systemEPSS score0.34%
A weakness has been identified in Campcodes School Fees Payment Management System 1.0. Affected by this issue is some unknown functionality of the file /ajax.php?action=delete_fees. Executing a manipulation of the argument ID can lead to sql injection. The attack may be performed from remote. The exploit has been made available to the public and could be used for attacks.CVE-2025-13272campcodesschool_fees_payment_management_systemEPSS score0.42%
A vulnerability was identified in Campcodes School Fees Payment Management System 1.0. Affected is an unknown function of the file /manage_course.php. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit is publicly available and might be used.CVE-2025-13484campcodescomplete_online_beauty_parlor_management_system+1EPSS score0.25%
A vulnerability was identified in Campcodes Complete Online Beauty Parlor Management System 1.0. This vulnerability affects unknown code of the file /admin/customer-list.php. The manipulation of the argument Name leads to cross site scripting. The attack may be initiated remotely. The exploit is publicly available and might be used.CVE-2025-13270campcodesschool_fees_payment_management_systemEPSS score0.34%
A vulnerability was found in Campcodes School Fees Payment Management System 1.0. This affects an unknown function of the file /ajax.php?action=save_course. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been made public and could be used.CVE-2025-13424campcodessupplier_management_systemEPSS score0.38%
A vulnerability has been found in Campcodes Supplier Management System 1.0. This affects an unknown function of the file /admin/add_product.php. The manipulation of the argument txtProductName leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used.CVE-2025-13410campcodesretro_basketball_shoes_online_storeEPSS score0.42%
A vulnerability has been found in Campcodes Retro Basketball Shoes Online Store 1.0. Affected is an unknown function of the file /admin/receipt.php. Such manipulation of the argument tid leads to sql injection. The attack can be executed remotely. The exploit has been disclosed to the public and may be used.CVE-2025-13271campcodesschool_fees_payment_management_systemEPSS score0.42%
A vulnerability was determined in Campcodes School Fees Payment Management System 1.0. This impacts an unknown function of the file /ajax.php?action=login. This manipulation of the argument Username causes sql injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized.CVE-2025-13291campcodessupplier_management_systemEPSS score0.42%
A vulnerability was found in Campcodes Supplier Management System 1.0. This affects an unknown part of the file /manufacturer/confirm_order.php. Performing a manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The exploit has been made public and could be used.