CVE-2025-11037: code-projects E-Commerce Website admin_index_search.php sql injection
A security flaw has been discovered in code-projects E-Commerce Website 1.0. This impacts an unknown function of the file /pages/adminindexsearch.php. Performing manipulation of the argument Search results in sql injection. The attack may be initiated remotely. The exploit has been released to the public and may be exploited.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-11037?
CVE-2025-11037 has a high severity rating due to its potential for SQL injection attacks that can be exploited remotely.
How do I fix CVE-2025-11037?
To fix CVE-2025-11037, update the E-Commerce Website software to the latest version that contains a patch for the SQL injection vulnerability.
Can CVE-2025-11037 affect my website?
Yes, if you are using Code-projects E-Commerce Website 1.0, your website could be vulnerable to the SQL injection described in CVE-2025-11037.
What type of attack can be performed using CVE-2025-11037?
CVE-2025-11037 allows for SQL injection attacks, which can lead to unauthorized data access or manipulation.
Is CVE-2025-11037 easy to exploit?
Yes, exploiting CVE-2025-11037 is relatively straightforward for an attacker familiar with SQL injection techniques.