PT-2025-47847 · Campcodes · Campcodes School Log Management System

0X0A1Lphj · Published 2025-11-23 · Updated 2025-12-02 · CVE-2025-13555

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Campcodes School File Management System version 1.0

Description A flaw exists in Campcodes School File Management System that allows for SQL injection. The issue is located within the Login component, specifically in the /index.php file. Manipulation of the stud no argument can trigger the injection. This attack can be carried out remotely. The exploit is publicly available.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Special Elements Injection

SQL injection

Weakness Enumeration

CWE-74

CWE-89

Related Identifiers

CVE-2025-13555

Affected Products

Campcodes School Log Management System

References · 13

• 🔥 https://github.com/arpcyber070/CVE/issues/4 · Exploit
• https://osv.dev/vulnerability/CVE-2025-13555 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-13555 · Security Note
• https://vuldb.com/?id.333322 · Note
• https://twitter.com/cracbot/status/1994360681274171576 · Twitter Post
• https://vuldb.com/?ctiid.333322 · Note
• https://twitter.com/dailycve/status/1995763304644362363 · Twitter Post
• https://t.me/CVEtracker/38019 · Telegram Post
• https://twitter.com/CVEnew/status/1992622003249971393 · Twitter Post
• https://campcodes.com · Note
• https://t.me/cveNotify/143709 · Telegram Post
• https://twitter.com/cracbot/status/1993998297716150487 · Twitter Post
• https://vuldb.com/?submit.696516 · Note