Login Request a demo
Critical severity · published Dec 21, 2025
CVE-2025-14990
Campcodes Complete Online Beauty Parlor Management System view-appointment.php sql injection
9.8
CVSS
0.4%
EPSS
No
On KEV
Description
A security flaw has been discovered in Campcodes Complete Online Beauty Parlor Management System 1.0. Impacted is an unknown function of the file /admin/view-appointment.php. Performing a manipulation of the argument viewid results in sql injection. The attack may be initiated remotely. The exploit has been released to the public and may be used for attacks.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 32% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CO
Complete Online Beauty Parlor Management System · Campcodes
1.0 · source: vendor, NVD
Affected product
CO
Complete Online Beauty Parlor Management System
Campcodes
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-14990
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-14990
Exploit
https://github.com/funnnxxx/my-cve/issues/2
Permissions Required
https://vuldb.com/?ctiid.337684
Third Party Advisory
https://vuldb.com/?id.337684
Third Party Advisory
https://vuldb.com/?submit.718453
Product
https://www.campcodes.com/
More from Complete Online Beauty Parlor Management System
9.8
CVE-2025-14989
Campcodes Complete Online Beauty Parlor Management System search-invoices.php sql injection
6.5
CVE-2024-2770
A vulnerability was found in Campcodes Complete Online Beauty Parlor Management System 1.0
6.5
CVE-2024-2769
A vulnerability was detected in Campcodes Complete Online Beauty Parlor Management System 1.0
6.5
CVE-2024-2768
A vulnerability was found in Campcodes Complete Online Beauty Parlor Management System 1.0
6.5
CVE-2024-2767
A vulnerability was found in Campcodes Complete Online Beauty Parlor Management System 1.0 and classified as critical