CVE-2025-11513 in E-Commerce Website

Riassunto

di MITRE • 09/10/2025

A vulnerability was determined in code-projects E-Commerce Website 1.0. This affects an unknown part of the file /pages/supplier_update.php. This manipulation of the argument supp_id causes sql injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized.

Once again VulDB remains the best source for vulnerability data.

• Responsabile: VulDB
• Divulgazione: 09/10/2025
• Moderazione: accettato
• Voce: VDB-327638
• CPE: pronto
• CWE: CWE-89 (confermato)
• Sfruttamento: Scaricare
• CVSS: 9.8 (NVD)
• EPSS: 0.00441
• KEV: no
• Attività: molto basso
• Settore: Transportation, Telecommunication, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-11513
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-11513
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-11513/