Online Apartment Visitor Management System
Monthly
SQL injection vulnerability in Campcodes Online Apartment Visitor Management System 1.0 allows remote unauthenticated attackers to perform low-impact database manipulation via the /forgot-password.php email parameter. Public exploit code is available, though no active exploitation has been reported (not listed in CISA KEV), and EPSS signals very low real-world exploitation
SQL injection in Campcodes Online Apartment Visitor Management System 1.0 allows high-privileged remote attackers to manipulate the mobilenumber parameter in /admin-profile.php, potentially leading to unauthorized database access or modification. The vulnerability requires administrative privileges to exploit and has limited confidentiality and integrity impact; public exploit code is available but real-world exploitation risk remains low due to EPSS score of 0.03% and the administrative access prerequisite.
SQL injection in Campcodes Online Apartment Visitor Management System 1.0 allows remote attackers to execute arbitrary SQL queries via the fromdate or todate parameters in /bwdates-reports-details.php. A public proof-of-concept exploit is available, but no active exploitation has been confirmed. This could lead to unauthorized data access or manipulation.
SQL injection in Campcodes Online Apartment Visitor Management System 1.0 allows remote unauthenticated attackers to manipulate the search-visitor.php endpoint via the searchdata parameter. Public exploit code exists, though EPSS probability is low (0.03%), indicating limited exploitation interest. No active exploitation confirmed in CISA KEV.
SQL injection in Campcodes Visitor Management 1.0 allows remote attackers to manipulate database queries via the Username parameter on /index.php. Exploit code is publicly available, but the vulnerability is not known to be actively exploited. EPSS score of 0.03% suggests very low likelihood of widespread exploitation.
SQL injection in Campcodes Online Apartment Visitor Management System 1.0 allows remote unauthenticated attackers to inject SQL via the 'editid' parameter in /visitor-detail.php, potentially exfiltrating or modifying database information. Public exploit code is available, but EPSS score of 0.03% indicates low likelihood of exploitation.
SQL injection vulnerability in Campcodes Online Apartment Visitor Management System 1.0 allows remote unauthenticated attackers to perform low-impact database manipulation via the /forgot-password.php email parameter. Public exploit code is available, though no active exploitation has been reported (not listed in CISA KEV), and EPSS signals very low real-world exploitation
SQL injection in Campcodes Online Apartment Visitor Management System 1.0 allows high-privileged remote attackers to manipulate the mobilenumber parameter in /admin-profile.php, potentially leading to unauthorized database access or modification. The vulnerability requires administrative privileges to exploit and has limited confidentiality and integrity impact; public exploit code is available but real-world exploitation risk remains low due to EPSS score of 0.03% and the administrative access prerequisite.
SQL injection in Campcodes Online Apartment Visitor Management System 1.0 allows remote attackers to execute arbitrary SQL queries via the fromdate or todate parameters in /bwdates-reports-details.php. A public proof-of-concept exploit is available, but no active exploitation has been confirmed. This could lead to unauthorized data access or manipulation.
SQL injection in Campcodes Online Apartment Visitor Management System 1.0 allows remote unauthenticated attackers to manipulate the search-visitor.php endpoint via the searchdata parameter. Public exploit code exists, though EPSS probability is low (0.03%), indicating limited exploitation interest. No active exploitation confirmed in CISA KEV.
SQL injection in Campcodes Visitor Management 1.0 allows remote attackers to manipulate database queries via the Username parameter on /index.php. Exploit code is publicly available, but the vulnerability is not known to be actively exploited. EPSS score of 0.03% suggests very low likelihood of widespread exploitation.
SQL injection in Campcodes Online Apartment Visitor Management System 1.0 allows remote unauthenticated attackers to inject SQL via the 'editid' parameter in /visitor-detail.php, potentially exfiltrating or modifying database information. Public exploit code is available, but EPSS score of 0.03% indicates low likelihood of exploitation.