CVE-2025-11513code-projects E-Commerce Website supplier_update.php sql injection

Descripción

A vulnerability was determined in code-projects E-Commerce Website 1.0. This affects an unknown part of the file /pages/supplier_update.php. This manipulation of the argument supp_id causes sql injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized.

Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.

Productos y versiones afectados

Referencias y parches

• VDB-327638 | code-projects E-Commerce Website supplier_update.php sql injection vdb-entrytechnical-descriptionThird Party AdvisoryVDB Entry
• VDB-327638 | CTI Indicators (IOB, IOC, TTP, IOA) signaturepermissions-requiredPermissions RequiredVDB Entry
• Submit #669747 | code-projects E-Commerce Website 1.0 SQL Injection third-party-advisoryThird Party AdvisoryVDB Entry
• https://github.com/cxm947/CVE-report-251006 exploitExploitThird Party Advisory
• https://code-projects.org/ productProduct
• https://github.com/cxm947/CVE-report-251006/blob/main/report.md ExploitThird Party Advisory