PT-2025-39772 · Codeastro · Codeastro Electricity Billing System

Wangshuyan · Published 2025-09-28 · Updated 2025-09-28 · CVE-2025-11104

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions CodeAstro Electricity Billing System version 1.0

Description A SQL injection issue exists in CodeAstro Electricity Billing System 1.0. The issue is located in the /admin/bill.php file. Manipulation of the uid argument can lead to SQL injection. The exploit is publicly available and may be used to launch attacks remotely.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Special Elements Injection

SQL injection

Weakness Enumeration

CWE-74

CWE-89

Related Identifiers

CVE-2025-11104

Affected Products

Codeastro Electricity Billing System

References · 11

• 🔥 https://github.com/WANGshuyan2025/cve/issues/1 · Exploit
• https://osv.dev/vulnerability/CVE-2025-11104 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-11104 · Security Note
• https://twitter.com/VulmonFeeds/status/1972295769114701873 · Twitter Post
• https://vuldb.com/?ctiid.326185 · Note
• https://t.me/cveNotify/136736 · Telegram Post
• https://codeastro.com · Note
• https://vuldb.com/?id.326185 · Note
• https://t.me/CVEtracker/33577 · Telegram Post
• https://vuldb.com/?submit.662441 · Note
• https://twitter.com/CVEnew/status/1972290549655761308 · Twitter Post