How to fix CVE-2025-5626?

Within 24 hours: Disable or restrict access to /admin/edit-subjects-detail.php if operationally feasible; enable detailed logging on database queries. Within 7 days: Implement Web Application Firewall (WAF) rules to block malicious SQL patterns in the editid parameter; conduct immediate audit of database access logs for signs of exploitation. Within 30 days: Upgrade to a patched version when available from vendor; if unavailable, evaluate alternative teacher record management solutions or implement network segmentation to limit admin interface exposure.

Is PHP affected by CVE-2025-5626?

A SQL injection vulnerability in Campcodes Online Teacher Record Management System allows unauthenticated remote attackers to compromise database integrity and access sensitive educational records.

CVE-2025-5626

EUVD-2025-16948 HIGH

2025-06-05 [email protected]

PHP SQLi Online Teacher Record Management System

7.3

CVSS 3.1

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

Low

Availability

Low

Lifecycle Timeline

Analysis Generated

Mar 14, 2026 - 17:53 vuln.today

EUVD ID Assigned

Mar 14, 2026 - 17:53 euvd

EUVD-2025-16948

PoC Detected

Jun 06, 2025 - 15:16 vuln.today

Public exploit code

CVE Published

Jun 05, 2025 - 01:15 nvd

HIGH 7.3

DescriptionNVD

A vulnerability classified as critical has been found in Campcodes Online Teacher Record Management System 1.0. Affected is an unknown function of the file /admin/edit-subjects-detail.php. The manipulation of the argument editid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

AnalysisAI

A SQL injection vulnerability in A vulnerability classified as critical (CVSS 7.3). Risk factors: public PoC available.

Technical ContextAI

CWE-74 (Injection). CVSS 7.3 indicates high severity. Affects A vulnerability classified as critical.

RemediationAI

Monitor vendor channels for patch availability. Implement input validation and WAF rules as interim mitigation.

CVE-2025-5626 vulnerability details – vuln.today

Back