A weakness has been identified in Campcodes Payroll Management System 1.0. The affected element is the function include of the file /index.php. This manipulation of the argument page causes file inclusion. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be exploited.
References
| Link | Resource |
|---|---|
| https://github.com/chenjunjie3/cve/issues/6 | Exploit Third Party Advisory Issue Tracking |
| https://vuldb.com/?ctiid.321548 | Permissions Required VDB Entry |
| https://vuldb.com/?id.321548 | Third Party Advisory VDB Entry |
| https://vuldb.com/?submit.635551 | Third Party Advisory VDB Entry |
| https://www.campcodes.com/ | Product |
Configurations
History
03 Sep 2025, 16:12
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Campcodes
Campcodes payroll Management System |
|
| CPE | cpe:2.3:a:campcodes:payroll_management_system:1.0:*:*:*:*:*:*:* | |
| References | () https://github.com/chenjunjie3/cve/issues/6 - Exploit, Third Party Advisory, Issue Tracking | |
| References | () https://vuldb.com/?ctiid.321548 - Permissions Required, VDB Entry | |
| References | () https://vuldb.com/?id.321548 - Third Party Advisory, VDB Entry | |
| References | () https://vuldb.com/?submit.635551 - Third Party Advisory, VDB Entry | |
| References | () https://www.campcodes.com/ - Product |
29 Aug 2025, 16:24
| Type | Values Removed | Values Added |
|---|---|---|
| Summary |
|
27 Aug 2025, 14:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-08-27 14:15
Updated : 2025-09-03 16:12
NVD link : CVE-2025-9529
Mitre link : CVE-2025-9529
CVE.ORG link : CVE-2025-9529
JSON object : View
Products Affected
campcodes
- payroll_management_system
CWE
CWE-73
External Control of File Name or Path