CampCodes vulnerabilities
We track 422 vulnerabilities in CampCodes products across 60+ products. 422 are rated high or critical, and none are known to be exploited. The most recent was published on November 5, 2026.
Latest CampCodes vulnerabilities
- 9.8 Critical severity
Online Examination System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, has been found in Campcodes Online Examination System 1.0. This issue affects some unknown processing of the file ranking-exam.php. The manipulation of the argument exam_id leads to sql injection. The attack m
- 9.8 Critical severity
Online Examination System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical was found in Campcodes Online Examination System 1.0. This vulnerability affects unknown code of the file exam.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exp
- 9.8 Critical severity
Online Examination System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical has been found in Campcodes Online Examination System 1.0. This affects an unknown part of the file addExamExe.php. The manipulation of the argument examTitle leads to sql injection. It is possible to initiate the attack
- 7.5 High severity
Complete Web-Based School Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, was found in Campcodes Complete Web-Based School Management System 1.0. This affects an unknown part of the file /view/show_student1.php. The manipulation of the argument grade leads to sql injection. It is po
- 8.8 High severity
Online Laundry Management System: Authorization Bypass Through User-Controlled Key
A vulnerability was found in Campcodes Online Laundry Management System 1.0. It has been classified as problematic. Affected is an unknown function of the file admin_class.php. The manipulation of the argument type with the input 1 leads to improper authorizat
- 8.8 High severity
Online Laundry Management System: Authorization Bypass Through User-Controlled Key
A vulnerability has been found in Campcodes Online Laundry Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file manage_user.php of the component HTTP Request Parameter Handler. The manipulation of the argument i
- 8.8 High severity
Online Laundry Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in Campcodes Online Laundry Management System 1.0. It has been classified as critical. This affects an unknown part of the file /manage_inv.php. The manipulation of the argument id leads to sql injection. It is possible to initiate th
- 8.8 High severity
Online Laundry Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in Campcodes Online Laundry Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /manage_user.php. The manipulation of the argument id leads to sql injection. The attack ma
- 8.8 High severity
Online Laundry Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in Campcodes Online Laundry Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /manage_receiving.php. The manipulation of the argument id leads to sql injectio
- 8.8 High severity
Online Laundry Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, was found in Campcodes Online Laundry Management System 1.0. Affected is an unknown function of the file /manage_laundry.php. The manipulation of the argument id leads to sql injection. It is possible to launc
- 8.8 High severity
Online Laundry Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, has been found in Campcodes Online Laundry Management System 1.0. This issue affects some unknown processing of the file /admin_class.php. The manipulation of the argument id/delete_category/delete_inv/delete_
- 7.2 High severity
Legal Case Management System: Unrestricted Upload of File with Dangerous Type
A vulnerability, which was classified as critical, was found in Campcodes Legal Case Management System 1.0. Affected is an unknown function of the file /admin/general-setting of the component Setting Handler. The manipulation of the argument favicon/logo leads
- 9.8 Critical severity
complete_web-based_school_management_system: Improper Neutralization of Special Elements used in an SQL Command
A SQL injection vulnerability in /model/get_admin_profile.php in Campcodes Complete Web-Based School Management System 1.0 allows attacker to execute arbitrary SQL commands via the my_index parameter.
- 8.1 High severity
complete_web-based_school_management_system: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in /model/delete_range_grade.php in campcodes Complete Web-Based School Management System 1.0 allows attacker to execute arbitrary SQL commands via the id parameter.
- 9.8 Critical severity
complete_web-based_school_management_system: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in index.php in campcodes Complete Web-Based School Management System 1.0 allows attacker to execute arbitrary SQL commands via the name parameter.
- 9.8 Critical severity
complete_web-based_school_management_system: Improper Neutralization of Special Elements used in an SQL Command
A SQL injection vulnerability in /model/get_classroom.php in campcodes Complete Web-Based School Management System 1.0 allows attacker to execute arbitrary SQL commands via the id parameter.
- 7.3 High severity
complete_web-based_school_management_system: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in /model/delete_student_grade_subject.php in campcodes Complete Web-Based School Management System 1.0 allows attacker to execute arbitrary SQL commands via the index parameter.
- 8.6 High severity
complete_web-based_school_management_system: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in add_friends.php in campcodes Complete Web-Based School Management System 1.0 allows attacker to execute arbitrary SQL commands via the friend_index parameter.
- 8.3 High severity
school_management_system: Improper Neutralization of Special Elements used in an SQL Command
A SQL injection vulnerability in /model/add_student_first_payment.php in campcodes Complete Web-Based School Management System 1.0 allows attacker to execute arbitrary SQL commands via the index parameter.
- 9.8 Critical severity
complete_web-based_school_management_system: Improper Neutralization of Special Elements used in an SQL Command
A SQL injection vulnerability in /model/get_events.php in campcodes Complete Web-Based School Management System 1.0 allows attacker to execute arbitrary SQL commands via the event_id parameter.
- 8.8 High severity
House Rental Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, was found in Campcodes House Rental Management System 1.0. This affects an unknown part of the file ajax.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack r
- 8.8 High severity
House Rental Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in Campcodes House Rental Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file manage_payment.php. The manipulation of the argument id leads to sql injection.
- 8.8 High severity
House Rental Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in Campcodes House Rental Management System 1.0. It has been classified as critical. Affected is an unknown function of the file manage_tenant.php. The manipulation of the argument id leads to sql injection. It is possible to launch t
- 8.8 High severity
House Rental Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in Campcodes House Rental Management System 1.0 and classified as critical. This issue affects some unknown processing of the file view_payment.php. The manipulation of the argument id leads to sql injection. The attack may be initiat
- 8.8 High severity
Church Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in Campcodes Church Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/add_sundaysch.php. The manipulation of the argument Gender leads to sql injection. The a
- 8.8 High severity
Church Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in Campcodes Church Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/addgiving.php. The manipulation of the argument amount leads to sql injection.
- 8.8 High severity
Church Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in Campcodes Church Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/addTithes.php. The manipulation of the argument na leads to sql injection. It is possible to launch the
- 8.8 High severity
Church Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in Campcodes Church Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/admin_user.php. The manipulation of the argument firstname leads to sql injection. The attack may be i
- 8.8 High severity
Church Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in Campcodes Church Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/delete_log.php. The manipulation of the argument selector leads to sql injection. The attack can be
- 9.8 Critical severity
Church Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, was found in Campcodes Church Management System 1.0. This affects an unknown part of the file /admin/index.php. The manipulation of the argument password leads to sql injection. It is possible to initiate the
- 9.8 Critical severity
Church Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, has been found in Campcodes Church Management System 1.0. Affected by this issue is some unknown functionality of the file login.php. The manipulation of the argument password leads to sql injection. The attac
- 8.8 High severity
Online Event Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical was found in Campcodes Online Event Management System 1.0. This vulnerability affects unknown code of the file /views/index.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remo
- 8.8 High severity
Online Event Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical has been found in Campcodes Online Event Management System 1.0. This affects an unknown part of the file /api/process.php. The manipulation of the argument userId leads to sql injection. It is possible to initiate the att
- 7.5 High severity
Online Patient Record Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in Campcodes Online Patient Record Management System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/login.php. The manipulation of the argument password leads to sql injection. It is possible
- 7.5 High severity
Online Art Gallery Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical has been found in Campcodes Online Art Gallery Management System 1.0. This affects an unknown part of the file /admin/adminHome.php. The manipulation of the argument uname leads to sql injection. It is possible to initiat
- 9.8 Critical severity
Online Examination System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, has been found in Campcodes Online Examination System 1.0. Affected by this issue is some unknown functionality of the file /adminpanel/admin/query/loginExe.php. The manipulation of the argument pass leads to
- 9.8 Critical severity
House Rental Management System: External Control of File Name or Path
A vulnerability was found in Campcodes House Rental Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file index.php. The manipulation of the argument page leads to file inclusion. The at
- 9.8 Critical severity
Student Information System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in Campcodes Student Information System 1.0. It has been classified as critical. Affected is an unknown function of the file /classes/Users.php?f=save. The manipulation of the argument username leads to sql injection. It is possible t
- 8.8 High severity
Online College Library System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, was found in Campcodes Online College Library System 1.0. Affected is an unknown function of the file /admin/category_row.php of the component HTTP POST Request Handler. The manipulation of the argument id lea
- 7.2 High severity
Online College Library System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, has been found in Campcodes Online College Library System 1.0. This issue affects some unknown processing of the file /admin/book_row.php of the component HTTP POST Request Handler. The manipulation of the arg