CVE-2025-10784
📋 TL;DR
Campcodes Online Learning Management System 1.0 contains a SQL injection vulnerability in the /admin/edit_subject.php file via the subject_code parameter. This allows remote attackers to execute arbitrary SQL commands on the database. Organizations using this specific version of the software are affected.
💻 Affected Systems
- Campcodes Online Learning Management System
📦 What is this software?
⚠️ Risk & Real-World Impact
Worst Case
Complete database compromise including data theft, data manipulation, authentication bypass, and potential remote code execution if database permissions allow.
Likely Case
Unauthorized access to sensitive student/teacher data, grade manipulation, and potential privilege escalation within the system.
If Mitigated
Limited impact with proper input validation and database permission restrictions in place.
🎯 Exploit Status
Exploit details are publicly available on GitHub. Attack requires access to the admin interface but no authentication bypass is mentioned.
🛠️ Fix & Mitigation
✅ Official Fix
Patch Version: Unknown
Vendor Advisory: https://www.campcodes.com/
Restart Required: No
Instructions:
No official patch available. Check vendor website for updates or consider alternative solutions.
🔧 Temporary Workarounds
Input Validation Filter
allAdd server-side validation to sanitize subject_code parameter before processing
Implement parameterized queries or prepared statements in edit_subject.php
Access Restriction
allRestrict access to /admin/edit_subject.php file
Add authentication requirement or IP whitelisting to the file
🧯 If You Can't Patch
- Implement web application firewall (WAF) with SQL injection rules
- Isolate the system from internet access and restrict to internal network only
🔍 How to Verify
Check if Vulnerable:
Check if /admin/edit_subject.php exists and accepts subject_code parameter without proper sanitizationCheck Version:
Check system documentation or configuration files for version informationVerify Fix Applied:
Test SQL injection attempts against the subject_code parameter to ensure they are blocked📡 Detection & Monitoring
Log Indicators:
- Unusual SQL queries in database logs
- Multiple failed login attempts to admin interface
- Unexpected database errors
Network Indicators:
- HTTP requests to /admin/edit_subject.php with SQL injection patterns in parameters
SIEM Query:
source="web_logs" AND uri="/admin/edit_subject.php" AND (param="subject_code" AND value CONTAINS "' OR '1'='1" OR value CONTAINS "UNION SELECT" OR value CONTAINS "--" OR value CONTAINS ";")