CVE-2025-11116: code-projects Simple Scheduling System add.home.php sql injection

Published Sep 28, 2025

Updated

A vulnerability was found in code-projects Simple Scheduling System 1.0. This affects an unknown part of the file /add.home.php. The manipulation of the argument faculty results in sql injection. The attack can be executed remotely. The exploit has been made public and could be used. Other parameters might be affected as well.

Affected Software

2 affected components

Code-projects Simple Scheduling System

Fabian Simple Scheduling System=1.0

Event History

Sep 28, 2025

CVE Published

via MITRE·07:02 PM

Data Sourced

via MITRE·07:02 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·07:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-11116?

CVE-2025-11116 has a moderate severity level due to its potential for remote SQL injection attacks.

How do I fix CVE-2025-11116?

To fix CVE-2025-11116, sanitize and validate user inputs in the /add.home.php file to prevent SQL injection.

Which software is affected by CVE-2025-11116?

CVE-2025-11116 affects the Code-projects Simple Scheduling System version 1.0.

What type of vulnerability is CVE-2025-11116?

CVE-2025-11116 is an SQL injection vulnerability that can be exploited remotely.

Can CVE-2025-11116 be exploited without authentication?

Yes, CVE-2025-11116 can be exploited remotely without requiring user authentication.