CVE-2025-11511

cna@vuldb.com

Details

CVSS v3: 6.3
CVSS v4: 2.1
CVSS v2: 6.5
NVD published: 2025-10-08 23:15:31
Affected versions: cpe:2.3:a:fabian:e-commerce_website:1.0:*:*:*:*:*:*:*
Summary: A flaw has been found in code-projects E-Commerce Website 1.0. Affected is an unknown function of the file /pages/supplier_add.php. Executing manipulation of the argument supp_email can lead to sql injection. The attack may be launched remotely. The exploit has been published and may be used.
Remediation: Not available in our cache.
Exploit info: https://github.com/Blowingwinds/cve-report/blob/main/cve4/report.md

TopVuln sends digest emails with high-risk CVE picks across multiple authoritative sources—curated with EPSS and AI. Choose daily per-stream emails and optional weekly or monthly roundups.

Subscribe — free email digest or paid plan

Information is aggregated from multiple authoritative sources for convenience; verify with NVD and vendors before operational decisions.