School File Management System
Approved changes feed: RSS · Atom
cpe:2.3:a:campcodes:school_file_management_system:1.0:*:*:*:*:*:*:*
part: a version: 1.0 update: *
| Vendor | Campcodes (0cbc38b8-6075-5b10-9920-3b1d3efa5f42) |
|---|---|
| Product | School File Management System (e4f4fe82-ac53-5c9b-bbf9-fe9b81cb0d63) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-15404 |
vulnerable | 2026-06-08 07:06:36.201866 |
campcodes School File Management System save_file.php unrestricted upload
MEDIUM (6.3)
A security vulnerability has been detected in campcodes School File Management System 1.0. The affected element is an unknown function of the file /save_file.php. The manipulation of the argument File leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used.
Published: 2026-01-01T13:32:06.670Z
Updated: 2026-02-23T08:01:46.404Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-14209 |
vulnerable | 2026-06-08 07:06:33.868386 |
Campcodes School File Management System update_query.php sql injection
HIGH (7.3)
A weakness has been identified in Campcodes School File Management System 1.0. This impacts an unknown function of the file /update_query.php. This manipulation of the argument stud_id causes sql injection. The attack can be initiated remotely. The exploit has been made available to the public and could be used for attacks.
Published: 2025-12-08T01:32:07.017Z
Updated: 2026-02-24T05:43:17.750Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-13555 |
vulnerable | 2026-06-08 07:04:32.495586 |
Campcodes School File Management System Login index.php sql injection
HIGH (7.3)
A vulnerability was detected in Campcodes School File Management System 1.0. Affected is an unknown function of the file /index.php of the component Login. Performing a manipulation of the argument stud_no results in sql injection. The attack can be initiated remotely. The exploit is now public and may be used.
Published: 2025-11-23T15:32:07.845Z
Updated: 2026-02-24T06:36:41.423Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-12873 |
vulnerable | 2026-06-08 07:04:31.132663 |
Campcodes School File Management update_user.php sql injection
MEDIUM (4.7)
A security flaw has been discovered in Campcodes School File Management 1.0. This affects an unknown part of the file /admin/update_user.php. Performing manipulation of the argument user_id results in sql injection. It is possible to initiate the attack remotely. The exploit has been released to the public and may be exploited.
Published: 2025-11-07T18:02:07.310Z
Updated: 2025-11-07T18:27:05.910Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.