CVE-2025-11358: code-projects Simple Banking System removeuser.php sql injection

Published Oct 7, 2025

Updated

A weakness has been identified in code-projects Simple Banking System 1.0. Impacted is an unknown function of the file /removeuser.php. Executing manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit has been made available to the public and could be exploited.

Affected Software

2 affected components

Code-projects Simple Banking System

Codeastro Simple Banking System=1.0

Event History

Oct 7, 2025

CVE Published

via MITRE·08:02 AM

Data Sourced

via MITRE·08:02 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·08:15 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-11358?

CVE-2025-11358 has a high severity rating due to its potential for remote SQL injection attacks.

How do I fix CVE-2025-11358?

To fix CVE-2025-11358, validate and sanitize all user inputs to prevent SQL injection.

What are the potential impacts of CVE-2025-11358?

The potential impacts of CVE-2025-11358 include unauthorized data access and potential database compromise.

Which software is affected by CVE-2025-11358?

CVE-2025-11358 affects the Code-projects Simple Banking System version 1.0.

Can CVE-2025-11358 be exploited remotely?

Yes, CVE-2025-11358 can be exploited remotely by manipulating the ID argument.