CVE-2025-7121

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

A vulnerability was found in Campcodes Complaint Management System 1.0. It has been classified as critical. This affects an unknown part of the file /users/complaint-details.php. The manipulation of the argument cid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-74CWE-89

Affected software

No affected versions have been published.

Timeline

Published
Jul 7, 2025
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-712109.8A vulnerability in the Trend Micro Apex One management console could allow a remote attacker to upload malicious code and execute commands oCVE-2025-712119.8A vulnerability in the Trend Micro Apex One management console could allow a remote attacker to upload malicious code and execute commands oCVE-2025-712127.8A link following vulnerability in the Trend Micro Apex One scan engine could allow a local attacker to escalate privileges on affected instaCVE-2025-712137.8An origin validation error vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installatioCVE-2025-712147.8An origin validation error vulnerability in the Trend Micro Apex One (mac) agent iCore service could allow a local attacker to escalate privCVE-2025-712157.0A time-of-check time-of-use vulnerability in the Trend Micro Apex One (mac) agent iCore service signature verification could allow a local aCVE-2025-712167.8A time-of-check time-of-use vulnerability in the Trend Micro Apex One (mac) agent cache mechanism could allow a local attacker to escalate pCVE-2025-712177.8An origin validation error vulnerability in the Trend Micro Apex One (mac) agent self-protection mechanism could allow a local attacker to eCVE-2025-71229.8A vulnerability was found in Campcodes Complaint Management System 1.0. It has been declared as critical. This vulnerability affects unknownCVE-2025-712207.8In the Linux kernel, the following vulnerability has been resolved: smb/server: call ksmbd_session_rpc_close() on error path in create_smb2CVE-2025-712217.0In the Linux kernel, the following vulnerability has been resolved: dmaengine: mmp_pdma: Fix race condition in mmp_pdma_residue() Add propCVE-2025-712225.5In the Linux kernel, the following vulnerability has been resolved: wifi: wlcore: ensure skb headroom before skb_push This avoids occasion
CVE-2025-7121: High severity, CVSS 8.8 | Vulnix