CVE-2025-11036: falha de média gravidade em code-projects E-Commerce Website
code-projects E-Commerce Website admin_account_update.php sql injection
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 6.9epss 0.5%
A vulnerability was identified in code-projects E-Commerce Website 1.0. This affects an unknown function of the file /pages/admin_account_update.php. Such manipulation of the argument user_id leads to sql injection. The attack can be launched remotely. The exploit is publicly available and might be used.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Produtos afetados
code-projects · E-Commerce WebsiteCVEs relacionadas — code-projects E-Commerce Website
No mesmo produto, das mais perigosas para as menos.
CVE-2023-7107HIGHcode-projects E-Commerce Website user_signup.php sql injectionEPSS 0.9%CVE-2023-7105MEDIUMcode-projects E-Commerce Website index_search.php sql injectionEPSS 0.9%CVE-2023-7108MEDIUMcode-projects E-Commerce Website user_signup.php cross site scriptingEPSS 0.8%CVE-2023-7106MEDIUMcode-projects E-Commerce Website sql injectionEPSS 0.8%CVE-2025-10793MEDIUMcode-projects E-Commerce Website admin_account_delete.php sql injectionEPSS 0.6%CVE-2025-11037MEDIUMcode-projects E-Commerce Website admin_index_search.php sql injectionEPSS 0.5%