CVE-2025-11553: code-projects Courier Management System add-courier.php sql injection
A weakness has been identified in code-projects Courier Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /add-courier.php. Executing manipulation of the argument Shippername can lead to sql injection. The attack can be launched remotely. The exploit has been made available to the public and could be exploited.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-11553?
The severity of CVE-2025-11553 is classified as high due to the potential for remote SQL injection attacks.
How do I fix CVE-2025-11553?
To fix CVE-2025-11553, sanitize and validate all user inputs, especially the 'Shippername' argument, to prevent SQL injection.
What systems are affected by CVE-2025-11553?
CVE-2025-11553 specifically affects the Courier Management System version 1.0 developed by Code-projects.
Can CVE-2025-11553 be exploited remotely?
Yes, CVE-2025-11553 can be exploited remotely, allowing attackers to inject SQL commands via the affected functionality.
What are the potential consequences of exploiting CVE-2025-11553?
Exploiting CVE-2025-11553 could allow attackers to access and manipulate the database, compromising sensitive information.