CVE-2025-11515: code-projects Online Complaint Site register-complaint.php sql injection

Published Oct 9, 2025

Updated

A security flaw has been discovered in code-projects Online Complaint Site 1.0. This issue affects some unknown processing of the file /cms/users/register-complaint.php. Performing manipulation of the argument cid results in sql injection. It is possible to initiate the attack remotely. The exploit has been released to the public and may be exploited.

Affected Software

2 affected components

Code-projects Online Complaint Site

Fabian Online Complaint Site=1.0

Event History

Oct 9, 2025

CVE Published

via MITRE·12:02 AM

Data Sourced

via MITRE·12:02 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·01:15 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-11515?

CVE-2025-11515 is classified with a high severity due to the potential for remote SQL injection attacks.

How do I fix CVE-2025-11515?

To fix CVE-2025-11515, sanitize and parameterize all SQL queries involving the 'cid' argument in the /cms/users/register-complaint.php file.

What systems are affected by CVE-2025-11515?

CVE-2025-11515 affects the Code-projects Online Complaint Site version 1.0.

What is the impact of exploiting CVE-2025-11515?

Exploiting CVE-2025-11515 can lead to unauthorized access to the database, potentially allowing an attacker to manipulate data.

Is CVE-2025-11515 being actively exploited?

As of now, there are reports suggesting that CVE-2025-11515 may be actively exploited in the wild.