CVE-2025-5675 MEDIUM

CVE-2025-5675: Campcodes Online Teacher Record Management System bwdates-reports-details.php sql injection

Vendor Campcodes
Product Online Teacher Record Management System
Weakness CWE-89 · SQLi
Published June 5, 2025
Last update June 5, 2025
View on NVD All CVEs

CVSS base score

6.9/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

What the vulnerability does

01Description

A vulnerability was found in Campcodes Online Teacher Record Management System 1.0. It has been classified as critical. This affects an unknown part of the file /trms/admin/bwdates-reports-details.php. The manipulation of the argument fromdate/todate leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

Key dates

02Disclosure timeline

June 5, 2025 CVE published
June 5, 2025 Record updated

Related vulnerabilities

04Related CVE

CVE-2024-11258 1000 Projects Beauty Parlour Management System index.php sql injection CVE-2025-6415 PHPGurukul Art Gallery Management System changeimage3.php sql injection CVE-2024-10947 Guangzhou Tuchuang Computer Software Development Interlib Library Cluster Automation Management System BatchOrder sql injection CVE-2024-51837 WordPress WP Contest plugin <= 1.0.0 - SQL Injection vulnerability CVE-2024-3534 Campcodes Church Management System login.php sql injection