CVE-2025-11108: code-projects Simple Scheduling System addroom.php sql injection

Published Sep 28, 2025

Updated

A vulnerability was determined in code-projects Simple Scheduling System 1.0. Impacted is an unknown function of the file /schedulingsystem/addroom.php. Executing manipulation of the argument room can lead to sql injection. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized.

Affected Software

2 affected components

Code-projects Simple Scheduling System

Fabian Simple Scheduling System=1.0

Event History

Sep 28, 2025

CVE Published

via MITRE·03:02 PM

Data Sourced

via MITRE·03:02 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·03:15 PM

DescriptionSeverityWeaknessAffected Software

Oct 9, 2026

Event

via NVD·11:05 AM

Frequently Asked Questions

What is the severity of CVE-2025-11108?

The severity of CVE-2025-11108 is critical due to the potential for remote SQL injection attacks.

How do I fix CVE-2025-11108?

To fix CVE-2025-11108, validate and sanitize input parameters in the /schedulingsystem/addroom.php file to prevent SQL injection.

What are the potential consequences of exploiting CVE-2025-11108?

Exploiting CVE-2025-11108 could allow an attacker to manipulate the database and execute arbitrary SQL queries.

Which software is affected by CVE-2025-11108?

CVE-2025-11108 specifically affects Code-projects Simple Scheduling System version 1.0.

Can CVE-2025-11108 be exploited remotely?

Yes, CVE-2025-11108 can be exploited remotely, making it highly dangerous.