Campcodes Vulnerabilities and Affected Products

Products

Complete Web-Based School Management System74 vulnerabilities
complete_web-based_school_management_system61 vulnerabilities
Sales and Inventory System37 vulnerabilities
Online Job Finder System23 vulnerabilities
Beauty Salon Management System21 vulnerabilities
Online Learning Management System21 vulnerabilities
Online Examination System16 vulnerabilities
Online Hospital Management System16 vulnerabilities
online_job_finder_system16 vulnerabilities
Advanced Online Voting System15 vulnerabilities
Grocery Sales and Inventory System15 vulnerabilities
Legal Case Management System15 vulnerabilities
Retro Basketball Shoes Online Store15 vulnerabilities
Supplier Management System14 vulnerabilities
Online Recruitment Management System12 vulnerabilities
Online Shopping Portal12 vulnerabilities
Complete Online Beauty Parlor Management System10 vulnerabilities
Computer Sales and Inventory System10 vulnerabilities
Courier Management System10 vulnerabilities
Employee Management System10 vulnerabilities
Payroll Management System10 vulnerabilities
Church Management System9 vulnerabilities
Complete Online DJ Booking System9 vulnerabilities
Online Laundry Management System9 vulnerabilities
Online Loan Management System9 vulnerabilities

Campcodes vulnerability results
Vulnerability	Title and context	CVSS	EPSS	PoCs	Signals	STIX action
CVE-2025-9754MEDIUM	Campcodes Online Hospital Management System Edit Profile edit-profile.php cross site scripting A flaw has been found in Campcodes Online Hospital Management System 1.0. The impacted element is an unknown function of the file /edit-profile.php of the component Edit Profile Page. Executing manipulation of the argument Username can lead to cross site scripting. The attack may be launched remotely. The exploit has been published and may be used. CWE-79 CWE-94Sep 1, 2025	CVSS5.1v4.0	EPSS0.278%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2025-9753MEDIUM	Campcodes Online Hospital Management System Patient Search patient-search.php cross site scripting A vulnerability was detected in Campcodes Online Hospital Management System 1.0. The affected element is an unknown function of the file /admin/patient-search.php of the component Patient Search Module. Performing manipulation of the argument Search by Name Mobile No results in cross site scripting. The attack may be initiated remotely. The exploit is now public and may be used. CWE-79 CWE-94Sep 1, 2025	CVSS4.8v4.0	EPSS0.295%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2025-6408MEDIUM	Campcodes Online Hospital Management System search.php sql injection A vulnerability has been found in Campcodes Online Hospital Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /doctor/search.php. The manipulation of the argument searchdata leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. CWE-74 CWE-89Jun 21, 2025	CVSS6.9v4.0	EPSS0.448%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2025-6407MEDIUM	Campcodes Online Hospital Management System user-login.php sql injection A vulnerability, which was classified as critical, was found in Campcodes Online Hospital Management System 1.0. This affects an unknown part of the file /user-login.php. The manipulation of the argument Username leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. CWE-74 CWE-89Jun 21, 2025	CVSS6.9v4.0	EPSS0.394%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2025-6406MEDIUM	Campcodes Online Hospital Management System forgot-password.php sql injection A vulnerability, which was classified as critical, has been found in Campcodes Online Hospital Management System 1.0. Affected by this issue is some unknown functionality of the file /hms/forgot-password.php. The manipulation of the argument fullname leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. CWE-74 CWE-89Jun 21, 2025	CVSS6.9v4.0	EPSS0.394%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2025-5365MEDIUM	Campcodes Online Hospital Management System patient-search.php sql injection A vulnerability was found in Campcodes Online Hospital Management System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/patient-search.php. The manipulation of the argument searchdata leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. CWE-74 CWE-89May 31, 2025	CVSS6.9v4.0	EPSS0.41%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2025-5364MEDIUM	Campcodes Online Hospital Management System add-patient.php sql injection A vulnerability was found in Campcodes Online Hospital Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /doctor/add-patient.php. The manipulation of the argument patname leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. CWE-74 CWE-89May 30, 2025	CVSS6.9v4.0	EPSS0.432%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2025-5363MEDIUM	Campcodes Online Hospital Management System index.php sql injection A vulnerability has been found in Campcodes Online Hospital Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /doctor/index.php. The manipulation of the argument Username leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. CWE-74 CWE-89May 30, 2025	CVSS6.9v4.0	EPSS0.432%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2025-5362MEDIUM	Campcodes Online Hospital Management System doctor-specilization.php sql injection A vulnerability, which was classified as critical, was found in Campcodes Online Hospital Management System 1.0. Affected is an unknown function of the file /admin/doctor-specilization.php. The manipulation of the argument doctorspecilization leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. CWE-74 CWE-89May 30, 2025	CVSS6.9v4.0	EPSS0.432%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2025-5361MEDIUM	Campcodes Online Hospital Management System contact.php sql injection A vulnerability, which was classified as critical, has been found in Campcodes Online Hospital Management System 1.0. This issue affects some unknown processing of the file /contact.php. The manipulation of the argument fullname leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. CWE-74 CWE-89May 30, 2025	CVSS6.9v4.0	EPSS0.432%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2025-5360MEDIUM	Campcodes Online Hospital Management System book-appointment.php sql injection A vulnerability classified as critical was found in Campcodes Online Hospital Management System 1.0. This vulnerability affects unknown code of the file /book-appointment.php. The manipulation of the argument doctor leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. CWE-74 CWE-89May 30, 2025	CVSS6.9v4.0	EPSS0.432%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2025-5359MEDIUM	Campcodes Online Hospital Management System appointment-history.php sql injection A vulnerability classified as critical has been found in Campcodes Online Hospital Management System 1.0. This affects an unknown part of the file /appointment-history.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. CWE-74 CWE-89May 30, 2025	CVSS6.9v4.0	EPSS0.432%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2025-5298MEDIUM	Campcodes Online Hospital Management System betweendates-detailsreports.php sql injection A vulnerability, which was classified as critical, was found in Campcodes Online Hospital Management System 1.0. Affected is an unknown function of the file /admin/betweendates-detailsreports.php. The manipulation of the argument fromdate/todate leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. CWE-74 CWE-89May 28, 2025	CVSS6.9v4.0	EPSS0.789%	PoCs1	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2025-5246MEDIUM	Campcodes Online Hospital Management System query-details.php sql injection A vulnerability classified as critical was found in Campcodes Online Hospital Management System 1.0. This vulnerability affects unknown code of the file /hms/admin/query-details.php. The manipulation of the argument adminremark leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. CWE-74 CWE-89May 27, 2025	CVSS6.9v4.0	EPSS0.432%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2025-5229MEDIUM	Campcodes Online Hospital Management System view-patient.php sql injection A vulnerability was found in Campcodes Online Hospital Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/view-patient.php. The manipulation of the argument viewid leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. CWE-74 CWE-89May 27, 2025	CVSS6.9v4.0	EPSS0.432%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2025-5224MEDIUM	Campcodes Online Hospital Management System add-doctor.php sql injection A vulnerability classified as critical has been found in Campcodes Online Hospital Management System 1.0. Affected is an unknown function of the file /admin/add-doctor.php. The manipulation of the argument Doctorspecialization leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. CWE-74 CWE-89May 27, 2025	CVSS6.9v4.0	EPSS0.432%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX