Aggregator

CVE-2025-13271 | Campcodes School Fees Payment Management System 1.0 /ajax.php?action=login Username sql injection (EUVD-2025-197776)

VulDB Recent Entries
11 months 3 weeks ago
A vulnerability was found in Campcodes School Fees Payment Management System 1.0. It has been rated as critical. This impacts an unknown function of the file /ajax.php?action=login. This manipulation of the argument Username causes sql injection. This vulnerability is registered as CVE-2025-13271. Remote exploitation of the attack is possible. Furthermore, an exploit is available.
vuldb.com

CVE-2025-13270 | Campcodes School Fees Payment Management System 1.0 ajax.php?action=save_course ID sql injection (EUVD-2025-197771)

VulDB Recent Entries
11 months 3 weeks ago
A vulnerability was found in Campcodes School Fees Payment Management System 1.0. It has been declared as critical. This affects an unknown function of the file /ajax.php?action=save_course. The manipulation of the argument ID results in sql injection. This vulnerability is cataloged as CVE-2025-13270. The attack may be launched remotely. Furthermore, there is an exploit available.
vuldb.com

CVE-2025-13269 | Campcodes School Fees Payment Management System 1.0 ajax.php?action=save_payment ID sql injection (EUVD-2025-197773)

VulDB Recent Entries
11 months 3 weeks ago
A vulnerability was found in Campcodes School Fees Payment Management System 1.0. It has been classified as critical. The impacted element is an unknown function of the file /ajax.php?action=save_payment. The manipulation of the argument ID leads to sql injection. This vulnerability is listed as CVE-2025-13269. The attack may be initiated remotely. In addition, an exploit is available.
vuldb.com

CVE-2025-13268 | Dromara dataCompare up to 1.0.1 JDBC URL DbconfigServiceImpl.java DbConfig injection (EUVD-2025-197774)

VulDB Recent Entries
11 months 3 weeks ago
A vulnerability was found in Dromara dataCompare up to 1.0.1 and classified as critical. The affected element is the function DbConfig of the file src/main/java/com/vince/xq/project/system/dbconfig/service/DbconfigServiceImpl.java of the component JDBC URL Handler. Executing manipulation can lead to injection. This vulnerability is tracked as CVE-2025-13268. The attack can be launched remotely. Moreover, an exploit is present.
vuldb.com

Managed ad