PT-2025-39787 · Code Projects · Simple Task Scheduling System

Chenzz · Published 2025-09-28 · Updated 2025-10-03 · CVE-2025-11116

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions code-projects Simple Scheduling System version 1.0

Description A flaw exists in code-projects Simple Scheduling System 1.0, specifically within the /add.home.php file. Manipulation of the faculty argument can lead to SQL injection. This issue is remotely exploitable and details about the exploit are publicly available. Other parameters may also be affected.

Recommendations Apply any available updates to address the issue in the /add.home.php file. As a temporary workaround, restrict or sanitize the faculty argument to prevent SQL injection. Review and sanitize all other input parameters to the /add.home.php file to identify and mitigate potential vulnerabilities.

Exploit

Fix

Special Elements Injection

SQL injection

Weakness Enumeration

CWE-74

CWE-89

Related Identifiers

CVE-2025-11116

Affected Products

Simple Task Scheduling System

References · 11

• 🔥 https://github.com/yihaofuweng/cve/issues/42 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-11116 · Security Note
• https://osv.dev/vulnerability/CVE-2025-11116 · Vendor Advisory
• https://t.me/CVEtracker/33589 · Telegram Post
• https://vuldb.com/?ctiid.326197 · Note
• https://vuldb.com/?id.326197 · Note
• https://twitter.com/cracbot/status/1974066961152705014 · Twitter Post
• https://vuldb.com/?submit.662701 · Note
• https://t.me/cveNotify/136748 · Telegram Post
• https://code-projects.org · Note
• https://twitter.com/CVEnew/status/1972381638865686864 · Twitter Post