CVE-2025-8334

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A vulnerability was found in Campcodes Online Recruitment Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/ajax.php?action=delete_recruitment_status. The manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-74 CWE-89

Affected software

Vendor	Product	Versions
Campcodes	Online Recruitment Management System	1.0

References

https://github.com/CVE-Hunter-Leo/CVE/issues/1Exploit, Issue Tracking
https://vuldb.com/?ctiid.318284Permissions Required, VDB Entry
https://vuldb.com/?id.318284Third Party Advisory, VDB Entry
https://vuldb.com/?submit.624073Third Party Advisory, VDB Entry
https://www.campcodes.com/Product
https://github.com/CVE-Hunter-Leo/CVE/issues/1Exploit, Issue Tracking

Timeline

Published: Jul 30, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-83354.3A vulnerability classified as problematic has been found in code-projects Simple Car Rental System 1.0. This affects an unknown part. The ma CVE-2025-83369.8A vulnerability classified as critical was found in Campcodes Online Recruitment Management System 1.0. This vulnerability affects unknown c CVE-2025-83375.4A vulnerability, which was classified as problematic, has been found in code-projects Simple Car Rental System 1.0. This issue affects some CVE-2025-83389.8A vulnerability was found in projectworlds Online Admission System 1.0 and classified as critical. Affected by this issue is some unknown fu CVE-2025-83399.8A vulnerability was found in code-projects Intern Membership Management System 1.0. It has been classified as critical. This affects an unkn CVE-2025-83406.1A vulnerability was found in code-projects Intern Membership Management System 1.0. It has been declared as problematic. This vulnerability CVE-2025-83415.0Grafana is an open-source platform for monitoring and observability. The Infinity datasource plugin, maintained by Grafana Labs, allows visu CVE-2025-83428.1The WooCommerce OTP Login With Phone Number, OTP Verification plugin for WordPress is vulnerable to authentication bypass due to insufficien CVE-2025-83439.8A vulnerability was found in openviglet shio up to 0.3.8. It has been rated as critical. This issue affects the function shStaticFilePreUplo CVE-2025-83449.8A vulnerability classified as critical has been found in openviglet shio up to 0.3.8. Affected is the function shStaticFileUpload of the fil CVE-2025-83459.8A vulnerability classified as critical was found in Shanghai Lingdang Information Technology Lingdang CRM up to 8.6.4.7. Affected by this vu CVE-2025-83466.1A vulnerability, which was classified as problematic, has been found in Portabilis i-Educar 2.10. Affected by this issue is some unknown fun