CVE-2025-11094: code-projects E-Commerce Website admin_product_details.php sql injection

Published Sep 28, 2025

Updated

A security vulnerability has been detected in code-projects E-Commerce Website 1.0. This affects an unknown part of the file /pages/adminproductdetails.php. Such manipulation of the argument prodid leads to sql injection. The attack may be launched remotely. The exploit has been disclosed publicly and may be used.

Affected Software

2 affected components

Code-projects E-Commerce Website

Fabian E-commerce Site=1.0

Event History

Sep 28, 2025

CVE Published

via MITRE·03:32 AM

Data Sourced

via MITRE·03:32 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·04:15 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-11094?

CVE-2025-11094 is classified as a high-severity vulnerability due to its potential for SQL injection and remote exploitation.

How do I fix CVE-2025-11094?

To fix CVE-2025-11094, sanitize and validate all user inputs in the /pages/admin_product_details.php file to prevent SQL injection.

Which software is affected by CVE-2025-11094?

CVE-2025-11094 affects the Code-projects E-Commerce Website version 1.0.

Can CVE-2025-11094 be exploited remotely?

Yes, CVE-2025-11094 can be exploited remotely due to its SQL injection vulnerability.

What is the type of vulnerability for CVE-2025-11094?

CVE-2025-11094 is categorized as an SQL injection vulnerability impacting user input handling.