CVE-2025-11511: code-projects E-Commerce Website supplier_add.php sql injection

Published Oct 8, 2025

Updated

A flaw has been found in code-projects E-Commerce Website 1.0. Affected is an unknown function of the file /pages/supplieradd.php. Executing manipulation of the argument suppemail can lead to sql injection. The attack may be launched remotely. The exploit has been published and may be used.

Affected Software

2 affected components

Code-projects E-Commerce Website

Fabian E-commerce Website=1.0

Event History

Oct 8, 2025

CVE Published

via MITRE·11:02 PM

Data Sourced

via MITRE·11:02 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·11:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-11511?

CVE-2025-11511 has been classified as a high severity vulnerability due to its potential for SQL injection.

How do I fix CVE-2025-11511?

To fix CVE-2025-11511, sanitize and validate all user inputs to prevent SQL injection vulnerabilities in the supplier_add.php file.

Which software is affected by CVE-2025-11511?

CVE-2025-11511 affects version 1.0 of the Code-projects E-Commerce Website.

Can CVE-2025-11511 be exploited remotely?

Yes, CVE-2025-11511 can be exploited remotely through manipulation of the supp_email argument.

What type of vulnerability is CVE-2025-11511?

CVE-2025-11511 is classified as an SQL injection vulnerability.