CVE-2025-11514: code-projects Online Complaint Site index.php sql injection
Published Oct 9, 2025
·Updated
A vulnerability was identified in code-projects Online Complaint Site 1.0. This vulnerability affects unknown code of the file /cms/users/index.php. Such manipulation of the argument Username leads to sql injection. The attack may be performed from remote. The exploit is publicly available and might be used.
Affected Software
2 affected components
Code-projects Online Complaint Site=1.0
Fabian Online Complaint Site=1.0
Event History
Oct 9, 2025
CVE Published
via MITRE·12:02 AM
Data Sourced
via MITRE·12:02 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·01:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-11514?
CVE-2025-11514 has a critical severity rating due to its remote SQL injection potential.
2
How do I fix CVE-2025-11514?
To fix CVE-2025-11514, it's essential to sanitize and validate user inputs in the affected file /cms/users/index.php.
3
What type of vulnerability is CVE-2025-11514?
CVE-2025-11514 is classified as a SQL injection vulnerability.
4
Who is affected by CVE-2025-11514?
CVE-2025-11514 affects users of Code-projects Online Complaint Site version 1.0.
5
Can CVE-2025-11514 be exploited remotely?
Yes, CVE-2025-11514 can be exploited remotely due to its SQL injection nature.