CVE-2025-11480: SourceCodester Simple E-Commerce Bookstore register.php sql injection
A vulnerability was detected in SourceCodester Simple E-Commerce Bookstore 1.0. The affected element is an unknown function of the file /register.php. Performing manipulation of the argument registerusername results in sql injection. The attack is possible to be carried out remotely. The exploit is now public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-11480?
CVE-2025-11480 is considered a high severity vulnerability due to the potential for remote SQL injection attacks.
How do I fix CVE-2025-11480?
To fix CVE-2025-11480, sanitize and validate all user inputs, especially the register_username parameter, to prevent SQL injection.
What software versions are affected by CVE-2025-11480?
CVE-2025-11480 affects SourceCodester Simple E-Commerce Bookstore version 1.0.
Can CVE-2025-11480 be exploited remotely?
Yes, CVE-2025-11480 can be exploited remotely by manipulating the register_username parameter.
What type of attack is associated with CVE-2025-11480?
CVE-2025-11480 is associated with SQL injection attacks.