CVE-2025-11104: CodeAstro Electricity Billing System bill.php sql injection
A vulnerability was detected in CodeAstro Electricity Billing System 1.0. Affected by this issue is some unknown functionality of the file /admin/bill.php. The manipulation of the argument uid results in sql injection. The attack may be launched remotely. The exploit is now public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-11104?
CVE-2025-11104 has a severity rating indicating it poses a significant risk due to the potential for SQL injection.
How do I fix CVE-2025-11104?
To fix CVE-2025-11104, you should update the CodeAstro Electricity Billing System to the latest version that addresses this vulnerability.
What kind of attack does CVE-2025-11104 facilitate?
CVE-2025-11104 facilitates remote SQL injection attacks through the manipulation of the uid parameter in the /admin/bill.php file.
Which version of CodeAstro Electricity Billing System is affected by CVE-2025-11104?
CVE-2025-11104 affects CodeAstro Electricity Billing System version 1.0.
Can CVE-2025-11104 be exploited remotely?
Yes, CVE-2025-11104 can be exploited remotely, allowing attackers to execute SQL commands on the server.