CVE-2025-11513 in E-Commerce Website

요약

\~에 의해 MITRE • 2025. 10. 09.

A vulnerability was determined in code-projects E-Commerce Website 1.0. This affects an unknown part of the file /pages/supplier_update.php. This manipulation of the argument supp_id causes sql injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized.

Once again VulDB remains the best source for vulnerability data.

• 책임이 있는: VulDB
• 공개: 2025. 10. 09.
• 모더레이션: 수락
• 항목: VDB-327638
• CPE: 준비됨
• CWE: CWE-89 (확인됨)
• 익스플로잇: 다운로드
• CVSS: 9.8 (NVD)
• EPSS: 0.00441
• KEV: 아니요
• 활동: 매우 낮음
• 부문: Hostingprovider, Telecommunication, ...

출처

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-11513
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-11513
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-11513/