CVE-2025-0625

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-0625
A vulnerability, which was classified as problematic, was found in CampCodes School Management Software 1.0. This affects an unknown part of the component Attachment Handler. The manipulation leads to improper control of resource identifiers. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used.
CVSS

No CVSS.

References
Link Resource
https://github.com/KhukuriRimal/Vulnerabilities/blob/main/Insecure%20Direct%20Object%20Reference%20(IDOR)%20-%20All%20Student%20Homework%20Downloadable.pdf Exploit Third Party Advisory
https://github.com/KhukuriRimal/Vulnerabilities/blob/main/Insecure%20Direct%20Object%20Reference%20(IDOR)%20-%20All%20Student%20Homework%20Downloadable.pdf Exploit Third Party Advisory
https://vuldb.com/?ctiid.292737 Permissions Required VDB Entry
https://vuldb.com/?id.292737 VDB Entry Third Party Advisory
https://vuldb.com/?submit.484917 Third Party Advisory VDB Entry
https://www.campcodes.com/ Product
Configurations

Configuration 1 (hide)

cpe:2.3:a:campcodes:school_management_software:1.0:*:*:*:*:*:*:*
History

28 Mar 2025, 19:14

Type Values Removed Values Added
CPE cpe:2.3:a:campcodes:school_management_software:1.0:*:*:*:*:*:*:*
CWE NVD-CWE-noinfo
First Time Campcodes school Management Software
Campcodes
References () https://vuldb.com/?id.292737 - () https://vuldb.com/?id.292737 - VDB Entry, Third Party Advisory
References () https://github.com/KhukuriRimal/Vulnerabilities/blob/main/Insecure%20Direct%20Object%20Reference%20(IDOR)%20-%20All%20Student%20Homework%20Downloadable.pdf - () https://github.com/KhukuriRimal/Vulnerabilities/blob/main/Insecure%20Direct%20Object%20Reference%20(IDOR)%20-%20All%20Student%20Homework%20Downloadable.pdf - Exploit, Third Party Advisory
References () https://www.campcodes.com/ - () https://www.campcodes.com/ - Product
References () https://vuldb.com/?ctiid.292737 - () https://vuldb.com/?ctiid.292737 - Permissions Required, VDB Entry
References () https://vuldb.com/?submit.484917 - () https://vuldb.com/?submit.484917 - Third Party Advisory, VDB Entry

22 Jan 2025, 19:15

Type Values Removed Values Added
CWE CWE-99
CVSS v2 : unknown
v3 : 3.1 		v2 : unknown
v3 : unknown

22 Jan 2025, 02:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-01-22 02:15

Updated : 2025-03-28 19:14

NVD link : CVE-2025-0625

Mitre link : CVE-2025-0625

JSON object : View

Products Affected

campcodes

  • school_management_software
CWE
NVD-CWE-noinfo