A weakness has been identified in Campcodes School Fees Payment Management System 1.0. Affected by this issue is some unknown functionality of the file /ajax.php?action=delete_fees. Executing manipulation of the argument ID can lead to sql injection. The attack may be performed from remote. The exploit has been made available to the public and could be exploited.
References
| Link | Resource |
|---|---|
| https://github.com/ASantsSec/CVE/issues/21 | Exploit Issue Tracking Third Party Advisory |
| https://vuldb.com/?ctiid.332609 | Permissions Required VDB Entry |
| https://vuldb.com/?id.332609 | Third Party Advisory VDB Entry |
| https://vuldb.com/?submit.690886 | Third Party Advisory VDB Entry |
| https://www.campcodes.com/ | Product |
Configurations
History
19 Nov 2025, 13:14
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Campcodes school Fees Payment Management System
Campcodes |
|
| CPE | cpe:2.3:a:campcodes:school_fees_payment_management_system:1.0:*:*:*:*:*:*:* | |
| References | () https://github.com/ASantsSec/CVE/issues/21 - Exploit, Issue Tracking, Third Party Advisory | |
| References | () https://vuldb.com/?ctiid.332609 - Permissions Required, VDB Entry | |
| References | () https://vuldb.com/?id.332609 - Third Party Advisory, VDB Entry | |
| References | () https://vuldb.com/?submit.690886 - Third Party Advisory, VDB Entry | |
| References | () https://www.campcodes.com/ - Product |
17 Nov 2025, 10:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-11-17 10:15
Updated : 2025-11-19 13:14
NVD link : CVE-2025-13274
Mitre link : CVE-2025-13274
CVE.ORG link : CVE-2025-13274
JSON object : View
Products Affected
campcodes
- school_fees_payment_management_system