CVE-2025-11478: falha de média gravidade em SourceCodester Farm Management System
SourceCodester Farm Management System myCart.php sql injection
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 5.3epss 0.3%
A weakness has been identified in SourceCodester Farm Management System 1.0. This issue affects some unknown processing of the file /myCart.php. This manipulation of the argument pid causes sql injection. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be exploited.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Produtos afetados
SourceCodester · Farm Management SystemCVEs relacionadas — SourceCodester Farm Management System
No mesmo produto, das mais perigosas para as menos.
CVE-2025-13200MEDIUMSourceCodester Farm Management System exposure of information through directory listingEPSS 0.5%CVE-2025-11487MEDIUMSourceCodester Farm Management System uploadProduct.php sql injectionEPSS 0.4%CVE-2025-11486MEDIUMSourceCodester Farm Management System buyNow.php sql injectionEPSS 0.4%CVE-2025-12926MEDIUMSourceCodester Farm Management System review.php sql injectionEPSS 0.3%