105
CVEs
0
Critical
1
High
0
KEV
105
PoC
1
Unpatched C/H
0.0%
Patch Rate
0.0%
Avg EPSS
Severity Breakdown
CRITICAL
0
HIGH
1
MEDIUM
66
LOW
38
Monthly CVE Trend
Affected Products (30)
PHP
547
Complete Web Based School Management System
104
Sales And Inventory System
39
Online Job Finder System
23
Online Learning Management System
21
Beauty Salon Management System
21
Online Hospital Management System
21
Advanced Online Voting System
20
Supplier Management System
19
Online Examination System
16
Grocery Sales And Inventory System
15
Legal Case Management System
15
Online Recruitment Management System
12
Payroll Management System
11
Online Shopping Portal
11
Courier Management System
10
Computer Sales And Inventory System
10
Online Laundry Management System
10
Employee Management System
10
Retro Basketball Shoes Online Store
10
Online Beauty Parlor Management System
10
Online Marriage Registration System
9
Online Loan Management System
9
Church Management System
9
Complete Online Dj Booking System
9
Online Food Ordering System
8
Complete Online Beauty Parlor Management System
8
School Fees Payment Management System
8
School Management Software
7
Online Movie Theater Seat Reservation System
7
Top Risky CVEs
| CVE | Summary | Severity | CVSS | EPSS | Priority | Signals |
|---|---|---|---|---|---|---|
| CVE-2025-11079 | A security flaw has been discovered in Campcodes Farm Management System 1.0. Rated medium severity (CVSS 5.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available. | MEDIUM | 5.5 | 0.3% | 48 |
PoC
No patch
|
| CVE-2025-14514 | SQL injection in Campcodes Supplier Management System 1.0 allows remote attackers to manipulate database queries via the `txtDistributorAddress` parameter in `/admin/add_distributor.php`. Public exploit code is available, though the EPSS score indicates a very low probability of widespread exploitation. | MEDIUM | 5.5 | 0.1% | 48 |
PoC
No patch
|
| CVE-2025-10447 | A vulnerability was detected in Campcodes Online Job Finder System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available. | MEDIUM | 5.5 | 0.1% | 48 |
PoC
No patch
|
| CVE-2025-13271 | A vulnerability was determined in Campcodes School Fees Payment Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available. | MEDIUM | 5.5 | 0.1% | 48 |
PoC
No patch
|
| CVE-2025-13272 | A vulnerability was identified in Campcodes School Fees Payment Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available. | MEDIUM | 5.5 | 0.1% | 48 |
PoC
No patch
|
| CVE-2025-13291 | A vulnerability was found in Campcodes Supplier Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available. | MEDIUM | 5.5 | 0.1% | 48 |
PoC
No patch
|
| CVE-2025-13410 | A vulnerability has been found in Campcodes Retro Basketball Shoes Online Store 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available. | MEDIUM | 5.5 | 0.1% | 48 |
PoC
No patch
|
| CVE-2025-13554 | A security vulnerability has been detected in Campcodes Supplier Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available. | MEDIUM | 5.5 | 0.1% | 48 |
PoC
No patch
|
| CVE-2025-13555 | A vulnerability was detected in Campcodes School File Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available. | MEDIUM | 5.5 | 0.1% | 48 |
PoC
No patch
|
| CVE-2025-13556 | A flaw has been found in Campcodes Online Polling System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available. | MEDIUM | 5.5 | 0.1% | 48 |
PoC
No patch
|
| CVE-2025-13557 | A vulnerability has been found in Campcodes Online Polling System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available. | MEDIUM | 5.5 | 0.1% | 48 |
PoC
No patch
|
| CVE-2025-14515 | SQL injection in Campcodes Supplier Management System 1.0 allows remote unauthenticated attackers to execute arbitrary SQL commands via the txtunitDetails parameter in /admin/add_unit.php. Public exploit code is available, but EPSS indicates low exploitation probability (0.05%) and it is not listed in CISA KEV. | MEDIUM | 5.5 | 0.1% | 48 |
PoC
No patch
|
| CVE-2025-14529 | Remote SQL injection in Campcodes Retro Basketball Shoes Online Store 1.0 allows unauthenticated attackers to manipulate the 'pid' argument in /admin/admin_running.php, leading to potential data exposure or modification. Exploit code is publicly available but no active exploitation has been confirmed (not in CISA KEV); the EPSS score of 0.05% indicates low probability of widespread exploitation despite the low attack complexity and no authentication requirement. | MEDIUM | 5.5 | 0.1% | 48 |
PoC
No patch
|
| CVE-2025-14664 | SQL injection in Campcodes Supplier Management System 1.0 allows remote attackers to execute arbitrary SQL commands through the chkId[] parameter in /admin/view_unit.php. The vulnerability can be exploited without authentication to access or modify database contents. Exploit code is publicly available, but no active exploitation has been confirmed as of this analysis. | MEDIUM | 5.5 | 0.1% | 48 |
PoC
No patch
|
| CVE-2025-14668 | SQL injection in Campcodes Advanced Online Examination System 1.0 allows remote attackers to manipulate the Username argument in /query/loginExe.php to inject malicious SQL. This can lead to unauthorized data access or modification. A public proof-of-concept is available, but EPSS indicates low exploitation probability. | MEDIUM | 5.5 | 0.1% | 48 |
PoC
No patch
|