CVE-2025-13271

Publication date

2025-11-17 08:32:06

Family

VulDB

State

PUBLISHED

Description

A vulnerability was determined in Campcodes School Fees Payment Management System 1.0. This impacts an unknown function of the file /ajax.php?action=login. This manipulation of the argument Username causes sql injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized.