CVE-2025-11431 | code-projects Web-Based Inventory and POS System 1.0 /transaction.php shopid sql injection

October 7, 2025 Yanac

A vulnerability was found in code-projects Web-Based Inventory and POS System 1.0. It has been classified as critical. The impacted element is an unknown function of the file /transaction.php. This manipulation of the argument shopid causes sql injection.

This vulnerability is tracked as CVE-2025-11431. The attack is possible to be carried out remotely. Moreover, an exploit is present.VulDB Recent EntriesRead More