CVE-2025-11553mediumCWE-74CWE-89

CVE-2025-11553: medium-severity vulnerability in code-projects Courier Management System

code-projects Courier Management System add-courier.php sql injection

Published · Updated

Follow this CVE+ Monitor Courier Management System

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5.3epss 0.4%
A weakness has been identified in code-projects Courier Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /add-courier.php. Executing manipulation of the argument Shippername can lead to sql injection. The attack can be launched remotely. The exploit has been made available to the public and could be exploited.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Affected products
code-projects · Courier Management System
Related CVEs — code-projects Courier Management System

In the same product, most dangerous first.

CVE-2024-10608MEDIUMcode-projects Courier Management System login.php sql injectionEPSS 0.7%CVE-2024-10607MEDIUMcode-projects Courier Management System track-result.php sql injectionEPSS 0.7%CVE-2025-12316MEDIUMcode-projects Courier Management System edit-courier.php sql injectionEPSS 0.4%CVE-2025-13302MEDIUMcode-projects Courier Management System add-new-officer.php sql injectionEPSS 0.4%CVE-2025-13303MEDIUMcode-projects Courier Management System search-edit.php sql injectionEPSS 0.4%CVE-2025-13396MEDIUMcode-projects Courier Management System add-office.php sql injectionEPSS 0.4%