Vulnerability Description
A security flaw has been discovered in Campcodes/SourceCodester Courier Management System 1.0. Affected by this issue is the function Signup of the file /ajax.php. Performing manipulation of the argument lastname results in sql injection. It is possible to initiate the attack remotely. The exploit has been released to the public and may be exploited.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Campcodes | Courier Management System | 1.0 |
Related Weaknesses (CWE)
References
- https://github.com/lrjbsyh/CVE_Hunter/issues/9#issue-3348584620ExploitIssue TrackingThird Party Advisory
- https://vuldb.com/?ctiid.322060Permissions RequiredVDB Entry
- https://vuldb.com/?id.322060Third Party AdvisoryVDB Entry
- https://vuldb.com/?submit.640684Third Party AdvisoryVDB Entry
- https://github.com/lrjbsyh/CVE_Hunter/issues/9#issue-3348584620ExploitIssue TrackingThird Party Advisory
FAQ
What is CVE-2025-9759?
CVE-2025-9759 is a vulnerability with a CVSS score of 7.3 (HIGH). A security flaw has been discovered in Campcodes/SourceCodester Courier Management System 1.0. Affected by this issue is the function Signup of the file /ajax.php. Performing manipulation of the argum...
How severe is CVE-2025-9759?
CVE-2025-9759 has been rated HIGH with a CVSS base score of 7.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2025-9759?
Check the references section above for vendor advisories and patch information. Affected products include: Campcodes Courier Management System.