Skip to main content

School File Management System

4 CVEs product

Monthly

CVE-2025-15404 Jan 01, 14:16 LOW POC Monitor

A security vulnerability has been detected in campcodes School File Management System 1.0. The affected element is an unknown function of the file /save_file.php. [CVSS 6.3 MEDIUM]

PHP Authentication Bypass File Upload School File Management System Campcodes
NVD GitHub VulDB
CVSS 4.0
2.1
EPSS
0.0%
CVE-2025-14209 Dec 08, 02:15 MEDIUM POC This Month

SQL injection in Campcodes School File Management System 1.0 allows unauthenticated remote attackers to inject SQL via the stud_id parameter in /update_query.php. Exploit code is publicly available, but the EPSS exploitation probability is very low (0.04%) and the CISA KEV catalog does not list it. The vulnerability has a CVSS 4.0 score of 5.5 (Medium), reflecting limited impact on confidentiality, integrity, and availability.

PHP SQLi School File Management System Campcodes
NVD GitHub VulDB
CVSS 4.0
5.5
EPSS
0.0%
CVE-2025-13555 Nov 23, 16:15 MEDIUM POC This Month

A vulnerability was detected in Campcodes School File Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi School File Management System Campcodes
NVD GitHub VulDB
CVSS 4.0
5.5
EPSS
0.1%
CVE-2025-12873 Nov 07, 18:15 LOW POC Monitor

A security flaw has been discovered in Campcodes School File Management 1.0. Rated medium severity (CVSS 5.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi School File Management System Campcodes
NVD VulDB GitHub
CVSS 4.0
2.0
EPSS
0.0%
EPSS 0% CVSS 2.1
LOW POC Monitor

A security vulnerability has been detected in campcodes School File Management System 1.0. The affected element is an unknown function of the file /save_file.php. [CVSS 6.3 MEDIUM]

PHP Authentication Bypass File Upload +2
NVD GitHub VulDB
EPSS 0% CVSS 5.5
MEDIUM POC This Month

SQL injection in Campcodes School File Management System 1.0 allows unauthenticated remote attackers to inject SQL via the stud_id parameter in /update_query.php. Exploit code is publicly available, but the EPSS exploitation probability is very low (0.04%) and the CISA KEV catalog does not list it. The vulnerability has a CVSS 4.0 score of 5.5 (Medium), reflecting limited impact on confidentiality, integrity, and availability.

PHP SQLi School File Management System +1
NVD GitHub VulDB
EPSS 0% CVSS 5.5
MEDIUM POC This Month

A vulnerability was detected in Campcodes School File Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi School File Management System +1
NVD GitHub VulDB
EPSS 0% CVSS 2.0
LOW POC Monitor

A security flaw has been discovered in Campcodes School File Management 1.0. Rated medium severity (CVSS 5.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi School File Management System +1
NVD VulDB GitHub

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy