CVE-2025-11357: code-projects Simple Banking System createuser.php sql injection

Published Oct 7, 2025

Updated

A security flaw has been discovered in code-projects Simple Banking System 1.0. This issue affects some unknown processing of the file /createuser.php. Performing manipulation of the argument Name results in sql injection. The attack may be initiated remotely. The exploit has been released to the public and may be exploited.

Affected Software

2 affected components

Code-projects Simple Banking System

Codeastro Simple Banking System=1.0

Event History

Oct 7, 2025

CVE Published

via MITRE·07:32 AM

Data Sourced

via MITRE·07:32 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·08:15 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-11357?

CVE-2025-11357 is rated as a critical vulnerability due to its potential for remote SQL injection.

What systems are affected by CVE-2025-11357?

CVE-2025-11357 affects the Code-projects Simple Banking System version 1.0.

How do I fix CVE-2025-11357?

To fix CVE-2025-11357, sanitize and validate user inputs in the /createuser.php file to prevent SQL injection.

Can CVE-2025-11357 be exploited remotely?

Yes, CVE-2025-11357 can be exploited remotely, allowing attackers to perform SQL injection attacks.

What is the root cause of CVE-2025-11357?

The root cause of CVE-2025-11357 is improper handling of user input in the database query within the /createuser.php script.