campcodes has 71 CVEs on record between 2023 and 2026. The busiest recent month was December 2025 with 13. The median CVSS is 7.3 (high). None have a confirmed exploitation report. The dominant weakness classes are CWE-89 (63) and CWE-74 (58). Most affected products: online_learning_management_system (11), retro_basketball_shoes_online_store (11), supplier_management_system (8).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 7.3
- Publish → KEV
- —
- Last 90 days
- 0 prev 0
Products
- online_learning_management_system 11
- retro_basketball_shoes_online_store 11
- supplier_management_system 8
- online_apartment_visitor_management_system 6
- school_fees_payment_management_system 6
- advanced_online_voting_system 5
Worst active — by depth score
CVE-2025-11555High· 7.3A vulnerability was detected in Campcodes Online Learning Management System 1.052CVE-2025-11077High· 7.3A vulnerability was determined in Campcodes Online Learning Management System 1.052CVE-2025-15207High· 7.3A vulnerability has been found in Campcodes Supplier Management System 1.040CVE-2025-15206High· 7.3A flaw has been found in Campcodes Supplier Management System 1.040CVE-2025-14668High· 7.3A vulnerability was detected in campcodes Advanced Online Examination System 1.040
campcodes vulnerabilities
CVEs affecting campcodes, newest first. Open any entry for full detail, references, and exploit status.
71 CVEsRSS
CVE-2025-15404Medium· 6.3A security vulnerability has been detected in campcodes School File Management System 1.0
A security vulnerability has been detected in campcodes School File Management System 1.0. The affected element is an unknown function of the file /save_file.php. The manipulation of the argument File leads to unrestricted upload. The at…
CVE-2025-15214Low· 2.4A vulnerability was found in Campcodes Park Ticketing System 1.0
A vulnerability was found in Campcodes Park Ticketing System 1.0. The impacted element is the function save_pricing of the file admin_class.php. The manipulation of the argument name/ride results in cross site scripting. The attack may b…
CVE-2025-15188Low· 2.4A vulnerability was determined in Campcodes Complete Online Beauty Parlor Management System 1.0
A vulnerability was determined in Campcodes Complete Online Beauty Parlor Management System 1.0. This vulnerability affects unknown code of the file /admin/search-invoices.php. Executing a manipulation of the argument searchdata can lead…
CVE-2025-15207High· 7.3A vulnerability has been found in Campcodes Supplier Management System 1.0
A vulnerability has been found in Campcodes Supplier Management System 1.0. Affected is an unknown function of the file /admin/view_products.php. The manipulation of the argument chkId[] leads to sql injection. It is possible to initiate…
CVE-2025-15206High· 7.3A flaw has been found in Campcodes Supplier Management System 1.0
A flaw has been found in Campcodes Supplier Management System 1.0. This impacts an unknown function of the file /admin/add_area.php. Executing a manipulation of the argument txtAreaCode can lead to sql injection. The attack may be perfor…
CVE-2025-14668High· 7.3A vulnerability was detected in campcodes Advanced Online Examination System 1.0
A vulnerability was detected in campcodes Advanced Online Examination System 1.0. This affects an unknown function of the file /query/loginExe.php. Performing a manipulation of the argument Username results in sql injection. It is possib…
CVE-2025-14664High· 7.3A vulnerability was identified in Campcodes Supplier Management System 1.0
A vulnerability was identified in Campcodes Supplier Management System 1.0. This issue affects some unknown processing of the file /admin/view_unit.php. The manipulation of the argument chkId[] leads to sql injection. Remote exploitation…
CVE-2025-14583High· 7.3A flaw has been found in campcodes Online Student Enrollment System 1.0
A flaw has been found in campcodes Online Student Enrollment System 1.0. This impacts an unknown function of the file /admin/register.php. Executing a manipulation of the argument photo can lead to unrestricted upload. The attack can be …
CVE-2025-14582Medium· 4.7A vulnerability was detected in campcodes Online Student Enrollment System 1.0
A vulnerability was detected in campcodes Online Student Enrollment System 1.0. This affects an unknown function of the file /admin/index.php?page=user-profile. Performing a manipulation of the argument userphoto results in unrestricted …
CVE-2025-14515High· 7.3A vulnerability has been found in Campcodes Supplier Management System 1.0
A vulnerability has been found in Campcodes Supplier Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/add_unit.php. Such manipulation of the argument txtunitDetails leads to sql injecti…
CVE-2025-14514High· 7.3A flaw has been found in Campcodes Supplier Management System 1.0
A flaw has been found in Campcodes Supplier Management System 1.0. Affected is an unknown function of the file /admin/add_distributor.php. This manipulation of the argument txtDistributorAddress causes sql injection. The attack can be in…
CVE-2025-14529High· 7.3A flaw has been found in Campcodes Retro Basketball Shoes Online Store 1.0
A flaw has been found in Campcodes Retro Basketball Shoes Online Store 1.0. The affected element is an unknown function of the file /admin/admin_running.php. This manipulation of the argument pid causes sql injection. It is possible to i…
CVE-2025-14219Medium· 4.7A weakness has been identified in Campcodes Retro Basketball Shoes Online Store 1.0
A weakness has been identified in Campcodes Retro Basketball Shoes Online Store 1.0. The impacted element is an unknown function of the file /admin/admin_running.php. Executing a manipulation of the argument product_image can lead to unr…
CVE-2025-14209High· 7.3A weakness has been identified in Campcodes School File Management System 1.0
A weakness has been identified in Campcodes School File Management System 1.0. This impacts an unknown function of the file /update_query.php. This manipulation of the argument stud_id causes sql injection. The attack can be initiated re…
CVE-2025-13291High· 7.3A vulnerability was found in Campcodes Supplier Management System 1.0
A vulnerability was found in Campcodes Supplier Management System 1.0. This affects an unknown part of the file /manufacturer/confirm_order.php. Performing a manipulation of the argument ID results in sql injection. The attack can be ini…
CVE-2025-13274Medium· 6.3A weakness has been identified in Campcodes School Fees Payment Management System 1.0
A weakness has been identified in Campcodes School Fees Payment Management System 1.0. Affected by this issue is some unknown functionality of the file /ajax.php?action=delete_fees. Executing a manipulation of the argument ID can lead to…
CVE-2025-13273Medium· 6.3A security flaw has been discovered in Campcodes School Fees Payment Management System 1.0
A security flaw has been discovered in Campcodes School Fees Payment Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /ajax.php?action=delete_payment. Performing a manipulation of the argument…
CVE-2025-13272High· 7.3A vulnerability was identified in Campcodes School Fees Payment Management System 1.0
A vulnerability was identified in Campcodes School Fees Payment Management System 1.0. Affected is an unknown function of the file /manage_course.php. Such manipulation of the argument ID leads to sql injection. The attack can be execute…
CVE-2025-13271High· 7.3A vulnerability was determined in Campcodes School Fees Payment Management System 1.0
A vulnerability was determined in Campcodes School Fees Payment Management System 1.0. This impacts an unknown function of the file /ajax.php?action=login. This manipulation of the argument Username causes sql injection. Remote exploitat…
CVE-2025-13270Medium· 6.3A vulnerability was found in Campcodes School Fees Payment Management System 1.0
A vulnerability was found in Campcodes School Fees Payment Management System 1.0. This affects an unknown function of the file /ajax.php?action=save_course. The manipulation of the argument ID results in sql injection. The attack may be …
CVE-2025-13269Medium· 6.3A vulnerability has been found in Campcodes School Fees Payment Management System 1.0
A vulnerability has been found in Campcodes School Fees Payment Management System 1.0. The impacted element is an unknown function of the file /ajax.php?action=save_payment. The manipulation of the argument ID leads to sql injection. The…
CVE-2025-13260Medium· 6.3A vulnerability has been found in Campcodes Supplier Management System 1.0
A vulnerability has been found in Campcodes Supplier Management System 1.0. This impacts an unknown function of the file /manufacturer/edit_product.php. Such manipulation of the argument cmbProductUnit leads to sql injection. The attack …
CVE-2025-13259Medium· 6.3A flaw has been found in Campcodes Supplier Management System 1.0
A flaw has been found in Campcodes Supplier Management System 1.0. This affects an unknown function of the file /manufacturer/edit_unit.php. This manipulation of the argument ID causes sql injection. The attack may be initiated remotely.…
CVE-2025-12873Medium· 4.7A security flaw has been discovered in Campcodes School File Management 1.0
A security flaw has been discovered in Campcodes School File Management 1.0. This affects an unknown part of the file /admin/update_user.php. Performing manipulation of the argument user_id results in sql injection. It is possible to ini…
CVE-2025-12339High· 7.3A security vulnerability has been detected in Campcodes Retro Basketball Shoes Online Store 1.0
A security vulnerability has been detected in Campcodes Retro Basketball Shoes Online Store 1.0. This issue affects some unknown processing of the file /admin/admin_football.php. The manipulation of the argument pid leads to sql injectio…
CVE-2025-12338High· 7.3A weakness has been identified in Campcodes Retro Basketball Shoes Online Store 1.0
A weakness has been identified in Campcodes Retro Basketball Shoes Online Store 1.0. This vulnerability affects unknown code of the file /admin/admin_product.ph. Executing a manipulation of the argument pid can lead to sql injection. The…
CVE-2025-12337High· 7.3A security flaw has been discovered in Campcodes Retro Basketball Shoes Online Store 1.0
A security flaw has been discovered in Campcodes Retro Basketball Shoes Online Store 1.0. This affects an unknown part of the file /admin/admin_feature.php. Performing a manipulation of the argument pid results in sql injection. The atta…
CVE-2025-12336High· 7.3A vulnerability was identified in Campcodes Retro Basketball Shoes Online Store 1.0
A vulnerability was identified in Campcodes Retro Basketball Shoes Online Store 1.0. Affected by this issue is some unknown functionality of the file /admin/admin_index.php. Such manipulation of the argument Username leads to sql injecti…
CVE-2025-11664Medium· 4.7A security vulnerability has been detected in Campcodes Online Beauty Parlor Management System 1.0
A security vulnerability has been detected in Campcodes Online Beauty Parlor Management System 1.0. The impacted element is an unknown function of the file /admin/search-appointment.php. Such manipulation of the argument searchdata leads…
CVE-2025-11663Medium· 4.7A weakness has been identified in Campcodes Online Beauty Parlor Management System 1.0
A weakness has been identified in Campcodes Online Beauty Parlor Management System 1.0. The affected element is an unknown function of the file /admin/manage-services.php. This manipulation of the argument sername causes sql injection. T…