A vulnerability identified as critical has been detected in Campcodes School File Management System 1.0. Affected is an unknown function of the file /index.php of the component Login. Performing manipulation of the argument stud_no results in sql injection.
This vulnerability is identified as CVE-2025-13555. The attack can be initiated remotely. Additionally, an exploit exists.
