Vulnerabilities in Campcodes

586 results
Vexday analysis

Com 573 CVEs catalogadas, o volume de vulnerabilidades associadas ao vendor Campcodes é expressivo, embora nenhuma delas figure atualmente no catálogo CISA KEV, situando a taxa de exploração ativa abaixo da média geral do catálogo. O tipo de falha mais recorrente é CWE-89 (injeção de SQL), o que indica padrões estruturais de desenvolvimento inseguro que tendem a facilitar comprometimento direto de bancos de dados. A CVE mais perigosa em observação no momento é CVE-2025-9744, com escore EPSS de 0,0166, uma das duas vulnerabilidades com PoC pública disponível — fator que, mesmo sem exploração ativa confirmada, eleva o risco de que isso mude em curto prazo. Equipes responsáveis por ambientes que utilizam produtos Campcodes devem priorizar a remediação de falhas de injeção e monitorar ativamente as duas entradas recentes dado o potencial de progressão.

CVE-2025-9922MEDIUMCampcodes Sales and Inventory System index.php cross site scriptingEPSS 0.4%CVE-2025-9691MEDIUMCampcodes Online Shopping System login.php sql injectionEPSS 0.4%CVE-2025-9923MEDIUMCampcodes Sales and Inventory System index.php cross site scriptingEPSS 0.4%CVE-2025-7537MEDIUMCampcodes Sales and Inventory System product_update.php sql injectionEPSS 0.4%CVE-2025-7469MEDIUMCampcodes Sales and Inventory System product_add.php sql injectionEPSS 0.4%CVE-2025-4735MEDIUMCampcodes Sales and Inventory System product.php unrestricted uploadEPSS 0.4%CVE-2024-5110MEDIUMCampcodes Complete Web-Based School Management System student_payment_invoice.php sql injectionEPSS 0.4%CVE-2024-4909MEDIUMCampcodes Complete Web-Based School Management System student_due_payment.php sql injectionEPSS 0.4%CVE-2024-5240MEDIUMCampcodes Complete Web-Based School Management System unread_msg.php sql injectionEPSS 0.4%CVE-2024-5233MEDIUMCampcodes Complete Web-Based School Management System teacher_salary_details3.php sql injectionEPSS 0.4%CVE-2024-5238MEDIUMCampcodes Complete Web-Based School Management System timetable_insert_form.php sql injectionEPSS 0.4%CVE-2024-5231MEDIUMCampcodes Complete Web-Based School Management System teacher_salary_details.php sql injectionEPSS 0.4%CVE-2024-5107MEDIUMCampcodes Complete Web-Based School Management System student_payment_details2.php sql injectionEPSS 0.4%CVE-2024-5239MEDIUMCampcodes Complete Web-Based School Management System timetable_update_form.php sql injectionEPSS 0.4%CVE-2024-5109MEDIUMCampcodes Complete Web-Based School Management System student_payment_history.php sql injectionEPSS 0.4%CVE-2024-4910MEDIUMCampcodes Complete Web-Based School Management System student_exam_mark_insert_form1.php sql injectionEPSS 0.4%CVE-2024-5234MEDIUMCampcodes Complete Web-Based School Management System teacher_salary_history1.php sql injectionEPSS 0.4%CVE-2024-5237MEDIUMCampcodes Complete Web-Based School Management System timetable_grade_wise.php sql injectionEPSS 0.4%CVE-2024-5108MEDIUMCampcodes Complete Web-Based School Management System student_payment_details4.php sql injectionEPSS 0.4%CVE-2024-4908MEDIUMCampcodes Complete Web-Based School Management System student_attendance_history1.php sql injectionEPSS 0.4%