EUVD-2025-19615Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Network vector, low complexity, no privileges; SQL injection typically allows limited data theft and tampering, with minor availability impact.
Primary rating from NVD.
CVSS VectorNVD
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Lifecycle Timeline
7DescriptionCVE.org
A vulnerability was found in Campcodes Employee Management System 1.0. It has been classified as critical. This affects an unknown part of the file /changepassemp.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
AnalysisAI
SQL injection in Campcodes Employee Management System 1.0 allows remote attackers to manipulate database queries via the ID parameter of the /changepassemp.php password change page. This unauthenticated, remotely exploitable flaw can lead to unauthorized data access or modification. Public exploit code is available, but the EPSS score of 0.06% indicates low exploitation probability, and no active exploitation has been confirmed.
Technical ContextAI
The vulnerability resides in the /changepassemp.php script, where the ID argument is directly concatenated into an SQL query without proper sanitization, resulting in an injection flaw. Classified under CWE-74, improper neutralization of special elements, the root cause is typical of PHP applications that fail to use parameterized queries. The affected product is specifically Campcodes Employee Management System 1.0 (cpe:2.3:a:campcodes:employee_management_system:1.0), a web-based HR application likely intended for small businesses.
RemediationAI
No vendor patch has been released. As a workaround, restrict network access to /changepassemp.php, implement a web application firewall rule to block SQL injection attempts, or disable the password change feature if feasible. For development teams with source access, modify the script to use parameterized queries for the ID parameter. Regularly monitor VulDB or the vendor’s site for an official fix, but since Campcodes scripts are often sold as-is, a patch may not be forthcoming.
sapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script (aka php-cgi), does not
(1) boardData102.php, (2) boardData103.php, (3) boardDataJP.php, (4) boardDataNA.php, and (5) boardDataWW.php in Netgear
ProjectSend versions prior to r1720 are affected by an improper authentication vulnerability. Rated critical severity (C
Roundcube Webmail contains a critical PHP object deserialization vulnerability (CVE-2025-49113, CVSS 9.9) that allows au
Util/PHP/eval-stdin.php in PHPUnit before 4.8.28 and 5.x before 5.6.3 allows remote attackers to execute arbitrary PHP c
Palo Alto Networks PAN-OS management web interface contains an authentication bypass allowing unauthenticated attackers
Nagios XI version xi-5.7.5 is affected by OS command injection. Rated high severity (CVSS 8.8), this vulnerability is re
Nagios XI version xi-5.7.5 is affected by OS command injection. Rated high severity (CVSS 8.8), this vulnerability is re
The get_referers function in /opt/ws/bin/sblistpack in Sophos Web Appliance before 3.7.9.1 and 3.8 before 3.8.1.1 allows
The Backup Migration plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1
NetAlertX (formerly PiAlert) versions 23.01.14 through 24.x before 24.10.12 allow unauthenticated command injection thro
The GiveWP - Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to PHP Object Injection in all
Share
External POC / Exploit Code
Leaving vuln.today