CVE-2025-11348

A vulnerability was determined in Campcodes Online Apartment Visitor Management System 1.0. This issue affects some unknown processing of the file /index.php. Executing a manipulation of the argument Username can lead to sql injection. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cna@vuldb.com

Published

2025-10-07

Last modified

2026-10-09

Weaknesses

CWE-74, CWE-89

Affected products

• Online Apartment Visitor Management System (Campcodes)

References

• https://vuldb.com/?id.327233
• https://vuldb.com/?ctiid.327233
• https://vuldb.com/?submit.664906
• https://github.com/arpcyber040/CVE/issues/3
• https://www.campcodes.com/