Sourcecodester · Simple E-Commerce Bookstore · CVE-2025-11476
**Name of the Vulnerable Software and Affected Versions**
SourceCodester Simple E-Commerce Bookstore version 1.0
**Description**
A flaw exists in SourceCodester Simple E-Commerce Bookstore version 1.0 related to the manipulation of the `login username` argument within the /index.php file. This can lead to a SQL injection attack, potentially allowing remote exploitation. The exploit is publicly available.
**Recommendations**
Apply any available updates or patches for version 1.0.
As a temporary workaround, sanitize the `login username` input to prevent SQL injection.
Restrict access to the /index.php file if possible.