CVE-2025-11486: SourceCodester Farm Management System buyNow.php sql injection
A vulnerability was identified in SourceCodester Farm Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /buyNow.php. Such manipulation of the argument Name leads to sql injection. The attack can be launched remotely. The exploit is publicly available and might be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-11486?
CVE-2025-11486 is classified as a high severity vulnerability due to its potential for remote SQL injection attacks.
How do I fix CVE-2025-11486?
To fix CVE-2025-11486, validate and sanitize all user inputs to prevent SQL injection in the buyNow.php file.
What systems are affected by CVE-2025-11486?
CVE-2025-11486 affects SourceCodester Farm Management System version 1.0.
Can CVE-2025-11486 be exploited remotely?
Yes, CVE-2025-11486 can be exploited remotely through manipulated input to the buyNow.php file.
What type of vulnerability is CVE-2025-11486?
CVE-2025-11486 is an SQL injection vulnerability that allows attackers to execute arbitrary SQL commands.