PT-2025-41319 · Unknown · Code-Projects E-Commerce Website

Huanghc · Published 2025-10-08 · Updated 2025-10-14 · CVE-2025-11511

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions code-projects E-Commerce Website version 1.0

Description A flaw exists in code-projects E-Commerce Website 1.0, specifically within the file /pages/supplier add.php. Manipulation of the supp email argument can lead to SQL injection. This attack can be launched remotely. The exploit has been published. The vulnerable function is unknown.

Recommendations Apply any available updates or patches for code-projects E-Commerce Website version 1.0. As a temporary workaround, restrict or sanitize input to the supp email argument in the /pages/supplier add.php file.

Exploit

Fix

Special Elements Injection

SQL injection

Weakness Enumeration

CWE-74

CWE-89

Related Identifiers

CVE-2025-11511

Affected Products

Code-Projects E-Commerce Website

References · 11

• 🔥 https://github.com/Blowingwinds/cve-report/blob/main/cve4/report.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-11511 · Security Note
• https://osv.dev/vulnerability/CVE-2025-11511 · Vendor Advisory
• https://t.me/cveNotify/137917 · Telegram Post
• https://vuldb.com/?id.327635 · Note
• https://vuldb.com/?ctiid.327635 · Note
• https://t.me/cveNotify/138547 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1976115791616516175 · Twitter Post
• https://twitter.com/CVEnew/status/1976063631415755206 · Twitter Post
• https://vuldb.com/?submit.669489 · Note
• https://code-projects.org · Note