CVE-2025-11516: code-projects Online Complaint Site complaint-details.php sql injection

Published Oct 9, 2025

Updated

A weakness has been identified in code-projects Online Complaint Site 1.0. Impacted is an unknown function of the file /cms/users/complaint-details.php. Executing manipulation of the argument cid can lead to sql injection. It is possible to launch the attack remotely. The exploit has been made available to the public and could be exploited.

Affected Software

2 affected components

Code-projects Online Complaint Site

Fabian Online Complaint Site=1.0

Event History

Oct 9, 2025

CVE Published

via MITRE·12:32 AM

Data Sourced

via MITRE·12:32 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·01:15 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-11516?

CVE-2025-11516 is classified as a medium severity vulnerability due to its potential for SQL injection exploitation.

How do I fix CVE-2025-11516?

To fix CVE-2025-11516, sanitize and validate the 'cid' argument in the /cms/users/complaint-details.php file to prevent SQL injection.

What is the impact of CVE-2025-11516?

The impact of CVE-2025-11516 includes the possibility of remote SQL injection attacks that can compromise the database.

Which software is affected by CVE-2025-11516?

CVE-2025-11516 affects the Code-projects Online Complaint Site version 1.0.

Can CVE-2025-11516 be exploited remotely?

Yes, CVE-2025-11516 can be exploited remotely, allowing an attacker to manipulate the argument cid.