PT-2025-28145 · Unknown · Campcodes Complaint Management System

Meraklbz · Published 2025-07-07 · Updated 2025-07-08 · CVE-2025-7121

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Campcodes Complaint Management System version 1.0

Description: A critical issue has been found in the system, affecting an unknown part of the /users/complaint-details.php file. The manipulation of the cid argument leads to SQL injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

Recommendations: For Campcodes Complaint Management System version 1.0, consider disabling the cid argument in the /users/complaint-details.php file until a patch is available to prevent SQL injection attacks. Restrict access to the complaint-details.php file to minimize the risk of exploitation. Avoid using the cid argument in the affected file until the issue is resolved.

Exploit

Fix

Special Elements Injection

SQL injection

Weakness Enumeration

CWE-74

CWE-89

Related Identifiers

CVE-2025-7121

Affected Products

Campcodes Complaint Management System

References · 10

• 🔥 https://github.com/ez-lbz/poc/issues/44 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-7121 · Security Note
• https://osv.dev/vulnerability/CVE-2025-7121 · Vendor Advisory
• https://twitter.com/VulmonFeeds/status/1942222585216868599 · Twitter Post
• https://t.me/cvenotify/127812 · Telegram Post
• https://t.me/cvenotify/128057 · Telegram Post
• https://vuldb.com/?id.315033 · Note
• https://vuldb.com/?ctiid.315033 · Note
• https://vuldb.com/?submit.605913 · Note
• https://campcodes.com · Note