CVE-2025-11530: code-projects Online Complaint Site state.php sql injection

Published Oct 9, 2025

Updated

A weakness has been identified in code-projects Online Complaint Site 1.0. Affected is an unknown function of the file /cms/admin/state.php. This manipulation of the argument state causes sql injection. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be exploited.

Affected Software

2 affected components

Code-projects Online Complaint Site

Fabian Online Complaint Site=1.0

Event History

Oct 9, 2025

CVE Published

via MITRE·03:32 AM

Data Sourced

via MITRE·03:32 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·04:16 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-11530?

CVE-2025-11530 is considered a high severity vulnerability due to its potential for SQL injection attacks.

How do I fix CVE-2025-11530?

To fix CVE-2025-11530, validate and sanitize user inputs in the /cms/admin/state.php file to prevent SQL injection.

What are the potential impacts of CVE-2025-11530?

The potential impacts of CVE-2025-11530 include unauthorized access to the database and manipulation of sensitive data.

Can CVE-2025-11530 be exploited remotely?

Yes, CVE-2025-11530 can be exploited remotely, making it crucial to address promptly.

Which software is affected by CVE-2025-11530?

CVE-2025-11530 affects code-projects Online Complaint Site version 1.0.