CVE-2025-9920CWE-73

Campcodes Recruitment Management System index.php include file inclusion

Medium · published September 3, 2025

CVSS v4.0
5.1
EPSS
0%
Percentile
38.7
In the wild
Unconfirmed
What it is

A security flaw has been discovered in Campcodes Recruitment Management System 1.0. This impacts the function include of the file /admin/index.php. The manipulation of the argument page results in file inclusion. It is possible to launch the attack remotely. The exploit has been released to the public and may be exploited.

The record
Technical detail
CVSS v4.0
5.1 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
EPSS
0.00458 · 38.7th percentile
Weakness
CWE-73 · External Control of File Name or Path
Published
2025-09-03T16:02Z
EPSS history
Timeline
  • 03 SEP 16:02Z
    Campcodes Recruitment Management System index.php include file inclusion
    cvelistv5