CNNVD-202508-1506 Information

CNNVD ID

CNNVD-202508-1506

CVE-2025-8952

  • CNNVD Published: 2025-08-14

Description (Chinese)

CampCodes Online Flight Booking Management System是菲律宾CampCodes公司的一个在线航班预订管理系统。 Campcodes Online Flight Booking Management System 1.0版本存在注入漏洞,该漏洞源于文件/admin/ajax.php中参数Username的错误操作导致SQL注入。

Description (English)

CampCodes Online Light Booking Management Systems is an online flight booking management system for CampCodes in the Philippines. There is an injection loophole in version 1.0 of Campcodes Online Flash Booking Management System, which stems from the error of Username, the parameter in the document/admin/ajax.php, which led to the SQL injection.

Hazard Level

Low

Vulnerability Type

注入

Affected Vendor

CampCodes

Published

2025-08-14

Last Modified

2026-02-24

References

https://vuldb.com/?ctiid.319921 https://vuldb.com/?id.319921 https://vuldb.com/?submit.627814 https://www.campcodes.com/ https://www.yuque.com/yuqueyonghuvrsrwv/dhlxlu/mlyefhpcsdan2df3#vulnerability-details-and-poc https://www.yuque.com/yuqueyonghuvrsrwv/dhlxlu/mlyefhpcsdan2df3?singleDoc

Share on: