← Database

CVE-2025-11480

HIGH CVSS: 7.3 Published: 2025-10-08 Modified: 2026-06-17

Description

A vulnerability was detected in SourceCodester Simple E-Commerce Bookstore 1.0. The affected element is an unknown function of the file /register.php. Performing manipulation of the argument register_username results in sql injection. The attack is possible to be carried out remotely. The exploit is now public and may be used.

Affected Platforms

Janobe Simple E-Commerce Bookstore

Weakness Type

CWE-74, CWE-89, CWE-89

References