CVE-2025-9529
Campcodes Payroll Management System index.php include file inclusion
Vexday Risk Score
13Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS 6.9EPSS 0.5%KEV nãoPoC —Nuclei —Metasploit —Patch —
Ciclo de vida
27 ago 2025Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
A weakness has been identified in Campcodes Payroll Management System 1.0. The affected element is the function include of the file /index.php. This manipulation of the argument page causes file inclusion. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be exploited.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Productos afectados
Campcodes · Payroll Management System¿Quieres saber si tu infraestructura está expuesta a esto?
Hablar con TrueHacking →