CVE-2025-11509 | code-projects E-Commerce Website 1.0 /pages/product_add.php prod_name sql injection

October 8, 2025 Yanac

A vulnerability was found in code-projects E-Commerce Website 1.0. It has been classified as critical. This impacts an unknown function of the file /pages/product_add.php. Performing manipulation of the argument prod_name results in sql injection.

This vulnerability was named CVE-2025-11509. The attack may be initiated remotely. In addition, an exploit is available.VulDB Recent EntriesRead More