CNNVD-202509-4289 Information

CNNVD ID

CNNVD-202509-4289

CVE-2025-11116

  • CNNVD Published: 2025-09-28

Description (Chinese)

Code-Projects Simple Scheduling System是Code-Projects开源的一个简易调度系统。 Code-Projects Simple Scheduling System 1.0版本存在SQL注入漏洞,该漏洞源于对文件/add.home.php中参数faculty的错误操作,可能导致SQL注入攻击。

Description (English)

Code-Projects Simple Scheduling Systems is a simple movement control system for the Code-Projects open source. The Code-Projects Simple Scheduling System Version 1.0 contains an injection loophole in SQL, which is the result of a mishandling of the parameter Faculty in the document/add.home.php, which could lead to an attack on SQL injection.

Hazard Level

Medium

Vulnerability Type

SQL注入

Affected Vendor

Code-Projects

Published

2025-09-28

Last Modified

2026-02-24

References

https://vuldb.com/?ctiid.326197 https://code-projects.org/ https://vuldb.com/?id.326197 https://github.com/yihaofuweng/cve/issues/42 https://vuldb.com/?submit.662701 https://access.redhat.com/security/cve/cve-2025-11116

Share on: