← Database

CVE-2025-11108

HIGH CVSS: 7.3 Published: 2025-09-28 Modified: 2026-06-17

Description

A vulnerability was determined in code-projects Simple Scheduling System 1.0. Impacted is an unknown function of the file /schedulingsystem/addroom.php. Executing manipulation of the argument room can lead to sql injection. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized.

Affected Platforms

Fabian Simple Scheduling System

Weakness Type

CWE-74, CWE-89

References