CVE-2025-11105: code-projects Simple Scheduling System addsubject.php sql injection

Published Sep 28, 2025

Updated

A flaw has been found in code-projects Simple Scheduling System 1.0. This affects an unknown part of the file /schedulingsystem/addsubject.php. This manipulation of the argument subcode causes sql injection. Remote exploitation of the attack is possible. The exploit has been published and may be used.

Affected Software

2 affected components

Code-projects Simple Scheduling System

Fabian Simple Scheduling System=1.0

Event History

Sep 28, 2025

CVE Published

via MITRE·01:02 PM

Data Sourced

via MITRE·01:02 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·01:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-11105?

The severity of CVE-2025-11105 is considered high due to its potential for remote SQL injection exploitation.

How do I fix CVE-2025-11105?

To fix CVE-2025-11105, sanitize and validate user inputs in the file /schedulingsystem/addsubject.php to prevent SQL injection.

What systems are affected by CVE-2025-11105?

CVE-2025-11105 affects the Simple Scheduling System 1.0 developed by Code-projects.

Can CVE-2025-11105 be exploited remotely?

Yes, CVE-2025-11105 can be exploited remotely, making it a significant security concern.

What actions should I take if my system is vulnerable to CVE-2025-11105?

If your system is vulnerable to CVE-2025-11105, it is crucial to apply the necessary patches and implement input validation immediately.