CVE-2025-9744 PoC — Campcodes Online Loan Management System ajax.php sql injection

Source

https://github.com/godfatherofexps/CVE-2025-9744-PoC

Associated Vulnerability

Title:Campcodes Online Loan Management System ajax.php sql injection (CVE-2025-9744)
Description:A weakness has been identified in Campcodes Online Loan Management System 1.0. The affected element is an unknown function of the file /ajax.php?action=login. Executing manipulation of the argument Username can lead to sql injection. The attack can be launched remotely. The exploit has been made available to the public and could be exploited.

Description

CVE-2025-9744 PoC.

Readme

# CVE-2025-9744 PoC

***This repository contains security research materials and educational demonstrations. It is not intended to be used for unauthorized testing, exploitation, or malicious activity.***

__Important:__

***Any runnable exploit code, payloads, or step-by-step attack instructions have been intentionally redacted, disabled, or written as high-level pseudocode to prevent abuse.
Use of material from this repository for illegal activity is strictly prohibited. The owner disclaims liability for misuse.***


# Exploit [Loan Management System] v1.0 - SQL Injection
# Google Dork: N/A
# Date: 20/10/2025
# Exploit Author: CodeB0ss 
# Vendor: Loan Management System
# Software Link: https://www.loanpro.io/
# Version: <= 1.0.0
# Tested on: Windows
# CVE : CVE-2025-9744
# CVSS Score : 10


<img width="935" height="238" alt="Screenshot 2025-10-21 000205" src="https://github.com/user-attachments/assets/e2e9cd2a-9d70-494c-8d43-ffed21b20659" />

File Snapshot


 [4.0K]  /data/pocs/b80a2efb21851990d6ce6b9293fdf56b5cd17861
├── [2.8K]  CVE-2025-9744.py
└── [ 961]  README.md

0 directories, 2 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!