CVE-2025-11115: code-projects Simple Scheduling System addtime.php sql injection

Published Sep 28, 2025

Updated

A vulnerability has been found in code-projects Simple Scheduling System 1.0. Affected by this issue is some unknown functionality of the file /addtime.php. The manipulation of the argument starttime/endtime leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used.

Affected Software

2 affected components

Code-projects Simple Scheduling System

Fabian Simple Scheduling System=1.0

Event History

Sep 28, 2025

CVE Published

via MITRE·06:32 PM

Data Sourced

via MITRE·06:32 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·07:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-11115?

CVE-2025-11115 is considered a high severity vulnerability due to the potential for remote SQL injection exploits.

How do I fix CVE-2025-11115?

To fix CVE-2025-11115, validate and sanitize user inputs in the /addtime.php file to prevent SQL injection.

What are the impacts of CVE-2025-11115?

The impacts of CVE-2025-11115 include unauthorized database access and potential data manipulation through SQL injection.

Is CVE-2025-11115 easily exploitable?

Yes, CVE-2025-11115 is easily exploitable if the affected application is accessible over the internet.

Which versions of Simple Scheduling System are affected by CVE-2025-11115?

CVE-2025-11115 affects the Simple Scheduling System version 1.0.