CVE-2025-11605: code-projects Client Details System update-profile.php sql injection

Published Oct 11, 2025

Updated

A vulnerability was identified in code-projects Client Details System 1.0. Impacted is an unknown function of the file /admin/update-profile.php. Such manipulation of the argument uid leads to sql injection. The attack can be executed remotely. The exploit is publicly available and might be used.

Affected Software

2 affected components

Code-projects Client Details System

Fabian Client Details System=1.0

Event History

Oct 11, 2025

CVE Published

via MITRE·02:32 PM

Data Sourced

via MITRE·02:32 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·03:16 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-11605?

CVE-2025-11605 is classified as a high severity vulnerability due to the potential for remote SQL injection attacks.

How do I fix CVE-2025-11605?

To remediate CVE-2025-11605, developers should sanitize and validate user inputs, particularly the uid parameter in /admin/update-profile.php.

What software is affected by CVE-2025-11605?

CVE-2025-11605 affects version 1.0 of the Code-projects Client Details System.

Can CVE-2025-11605 be exploited remotely?

Yes, CVE-2025-11605 can be exploited remotely, allowing attackers to execute SQL injection.

What kind of attack can CVE-2025-11605 allow?

CVE-2025-11605 enables SQL injection attacks, which can lead to unauthorized access to the database and sensitive information.