Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
5.3

CampCodes Computer Laboratory Management System 1.0 allows remotely injected malicious code

CVE-2025-0342 · published 1 year ago
Summary

A security issue in CampCodes Computer Laboratory Management System 1.0 allows attackers to inject malicious code into the system, potentially stealing sensitive information or taking control of it. This can happen when a user interacts with a certain part of the system. It's essential to update to a fixed version to prevent this type of attack.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
campcodes computer_laboratory_management_system 1.0
cpe:2.3:a:campcodes:computer_laboratory_management_system:1.0:*:*:*:*:*:*:*
Original advisory text
A vulnerability, which was classified as problematic, was found in CampCodes Computer Laboratory Management System 1.0. This affects an unknown part of the file /class/edit/edit. The manipulation o...
A vulnerability, which was classified as problematic, was found in CampCodes Computer Laboratory Management System 1.0. This affects an unknown part of the file /class/edit/edit. The manipulation of the argument s_lname leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker partial control
Severity
5.3 Medium
Exploitation
<1% chance of attack within 30 days
Type
CWE-79Cross-site Scripting (XSS)
CWE-94Code Injection
Timeline
Published9 Jan 2025
Updated4 Nov 2026
First seen7 Mar 2026
Sources
CVE-2025-0342 · NVD
Track software like this
Free during beta