CVE-2025-12873 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

A security flaw has been discovered in Campcodes School File Management 1.0. This affects an unknown part of the file /admin/update_user.php. Performing manipul…
Medium CVSS: 5.1

CVE-2025-12873

A security flaw has been discovered in Campcodes School File Management 1.0. This affects an unknown part of the file /admin/update_user.php. Performing manipulation of the argument user_id results in sql injection. It is possible to initiate the attack remotely. The exploit has been released to the public and may be exploited.
Vendor
Campcodes
Product
School File Management System
CWE
CWE-74
Yayın Tarihi
2025-11-07 18:15:36
Güncelleme
2025-11-18 19:39:24
Source Identifier
cna@vuldb.com
KEV Date Added
-

Kategoriler

CWE-74 School File Management System MEDIUM Campcodes 2025

Referanslar

https://github.com/YYYGdd/CVE/issues/1 https://vuldb.com/?ctiid.331510 https://vuldb.com/?id.331510 https://vuldb.com/?submit.680854 https://www.campcodes.com/