EXPOSURES › CVE-2025-11349

▸ RECOMMENDED ACTION  Patch the affected products and confirm your instances are covered.

A vulnerability was identified in Campcodes Online Apartment Visitor Management System 1.0. Impacted is an unknown function of the file /search-visitor.php. The manipulation of the argument searchdata leads to sql injection. The attack may be initiated remotely. The exploit is publicly available and might be used.