CVE-2025-11476: SourceCodester Simple E-Commerce Bookstore index.php sql injection
A vulnerability was identified in SourceCodester Simple E-Commerce Bookstore 1.0. This affects an unknown part of the file /index.php. The manipulation of the argument loginusername leads to sql injection. The attack may be initiated remotely. The exploit is publicly available and might be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-11476?
CVE-2025-11476 is rated as a critical vulnerability due to its potential for remote SQL injection attacks.
How do I fix CVE-2025-11476?
To remediate CVE-2025-11476, it is recommended to sanitize and parameterize database queries and update the affected software to the latest version.
Who is impacted by CVE-2025-11476?
Organizations using SourceCodester Simple E-Commerce Bookstore version 1.0 are vulnerable to CVE-2025-11476.
Can CVE-2025-11476 be exploited remotely?
Yes, CVE-2025-11476 can be exploited remotely, allowing attackers to perform SQL injection.
What part of the software is affected by CVE-2025-11476?
CVE-2025-11476 specifically affects the /index.php file within the SourceCodester Simple E-Commerce Bookstore.