Campcodes School File Management System vulnerabilities

4 CVEs affecting Campcodes School File Management System, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-15404, published 2026-01-01.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2025-14209, published 2025-12-08. Critical severity, CVSS 9.8. EPSS: 0.4% chance of exploitation in the next 30 days. A weakness has been identified in Campcodes School File Management System 1.0. This impacts an unknown function of the file /update_query.php. This manipulation of the argument stud_id causes sql…
CVE-2025-13555, published 2025-11-23. Critical severity, CVSS 9.8. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability was detected in Campcodes School File Management System 1.0. Affected is an unknown function of the file /index.php of the component Login. Performing a manipulation of the argument…
CVE-2025-12873, published 2025-11-07. Critical severity, CVSS 9.8. EPSS: 0.4% chance of exploitation in the next 30 days. A security flaw has been discovered in Campcodes School File Management 1.0. This affects an unknown part of the file /admin/update_user.php. Performing manipulation of the argument user_id results…
CVE-2025-15404, published 2026-01-01. High severity, CVSS 8.8. EPSS: 0.3% chance of exploitation in the next 30 days. A security vulnerability has been detected in campcodes School File Management System 1.0. The affected element is an unknown function of the file /save_file.php. The manipulation of the argument…