CVE-2025-9744

HIGH NUCLEI

Campcodes Online Loan Management System 1.0 - SQL Injection

Title source: llm

Description

A weakness has been identified in Campcodes Online Loan Management System 1.0. The affected element is an unknown function of the file /ajax.php?action=login. Executing manipulation of the argument Username can lead to sql injection. The attack can be launched remotely. The exploit has been made available to the public and could be exploited.

Nuclei Templates (1)

Loan Management System 1.0 - SQL Injection
CRITICALVERIFIEDby arafatansari

References (5)

Scores

CVSS v3 7.3
EPSS 0.0168
EPSS Percentile 82.2%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Details

CWE
CWE-74 CWE-89
Status published
Products (1)
campcodes/online_loan_management_system 1.0
Published Aug 31, 2025
Tracked Since Feb 18, 2026