HIGHCVSS 7.3Vulnerability

CVE-2025-14209

A weakness has been identified in Campcodes School File Management System 1.0. This impacts an unknown function of the file /update_query.php. This manipulation of the argument stud_id causes sql injection. The attack can be initiated remotely. The exploit has been made available to the public and could be used for attacks.

Properties

Severity: HIGH
Epss score: 0.00387
Cvss severity: HIGH
Cvss score: 7.3
Retrieved at: 2026-10-21T01:24:47+00:00
Last source: FIRST EPSS
Score: 7.3
Cve id: CVE-2025-14209
Cvss vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
First seen by Signal: 2026-10-07T22:34:44+00:00
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Published at: 2025-12-08T02:15:53.060
Last modified: 2026-10-07T20:10:01.970
Epss percentile: 0.31406

Related Entities (3)

HAS_WEAKNESS (2)

→[Weakness]Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

→[Weakness]Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

AFFECTS_PRODUCT (1)

→[Product]cpe:2.3:a:campcodes:school_file_management_system:1.0:*:*:*:*:*:*:*

Explore deeper with Ninja Signal's threat intelligence graph

Search in Spektr Open Signal Desktop