CVE-2025-9759 | Campcodes Courier Management System 1.0 /ajax.php signup lastname sql injection

A vulnerability has been found in Campcodes Courier Management System 1.0 and classified as critical. Affected by this issue is the function Signup of the file /ajax.php. Performing manipulation of the argument lastname results in sql injection.

This vulnerability is cataloged as CVE-2025-9759. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.