CVE-2025-11107: code-projects Simple Scheduling System addcourse.php sql injection

Published Sep 28, 2025

Updated

A vulnerability was found in code-projects Simple Scheduling System 1.0. This issue affects some unknown processing of the file /schedulingsystem/addcourse.php. Performing manipulation of the argument corcode results in sql injection. The attack is possible to be carried out remotely. The exploit has been made public and could be used.

Affected Software

2 affected components

Code-projects Simple Scheduling System

Fabian Simple Scheduling System=1.0

Event History

Sep 28, 2025

CVE Published

via MITRE·02:32 PM

Data Sourced

via MITRE·02:32 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·03:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-11107?

CVE-2025-11107 has a high severity level due to its potential for SQL injection, allowing remote exploitation.

How do I fix CVE-2025-11107?

To fix CVE-2025-11107, sanitize user inputs in the /schedulingsystem/addcourse.php file to prevent SQL injection.

What systems are affected by CVE-2025-11107?

CVE-2025-11107 affects the Simple Scheduling System version 1.0 developed by code-projects.

Can CVE-2025-11107 be exploited remotely?

Yes, CVE-2025-11107 can be exploited remotely, allowing attackers to manipulate database queries.

What specific file is vulnerable in CVE-2025-11107?

The vulnerable file in CVE-2025-11107 is /schedulingsystem/addcourse.php.