A security flaw has been discovered in Campcodes School Fees Payment Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /ajax.php?action=delete_payment. Performing manipulation of the argument ID results in sql injection. The attack is possible to be carried out remotely. The exploit has been released to the public and may be exploited.
References
| Link | Resource |
|---|---|
| https://github.com/ASantsSec/CVE/issues/20 | Exploit Issue Tracking Third Party Advisory |
| https://vuldb.com/?ctiid.332608 | Permissions Required VDB Entry |
| https://vuldb.com/?id.332608 | Third Party Advisory VDB Entry |
| https://vuldb.com/?submit.690048 | Third Party Advisory VDB Entry |
| https://www.campcodes.com/ | Product |
Configurations
History
19 Nov 2025, 13:14
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:campcodes:school_fees_payment_management_system:1.0:*:*:*:*:*:*:* | |
| First Time |
Campcodes school Fees Payment Management System
Campcodes |
|
| References | () https://github.com/ASantsSec/CVE/issues/20 - Exploit, Issue Tracking, Third Party Advisory | |
| References | () https://vuldb.com/?ctiid.332608 - Permissions Required, VDB Entry | |
| References | () https://vuldb.com/?id.332608 - Third Party Advisory, VDB Entry | |
| References | () https://vuldb.com/?submit.690048 - Third Party Advisory, VDB Entry | |
| References | () https://www.campcodes.com/ - Product |
17 Nov 2025, 10:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-11-17 10:15
Updated : 2025-11-19 13:14
NVD link : CVE-2025-13273
Mitre link : CVE-2025-13273
CVE.ORG link : CVE-2025-13273
JSON object : View
Products Affected
campcodes
- school_fees_payment_management_system