CVE 6.9 MEDIUM

code-projects E-Commerce Website user_index_search.php sql injection_CVE-2025-11558

6.9 / 10
MEDIUM
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

Description

A vulnerability was found in code-projects E-Commerce Website 1.0. Impacted is an unknown function of the file /pages/user_index_search.php. Performing manipulation of the argument Search results in sql injection. The attack is possible to be carried out remotely. The exploit has been made public and could be used.

Basic Information

ID CVE-2025-11558
Source VulDB
Published Oct 9, 2025 at 21:02

Affected Product

Vendor code-projects
Product E-Commerce Website
Version 1.0
Affected Versions code-projects E-Commerce Website 1.0

CWE Classification

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.