CNNVD-202510-1146 Information

Oct 08, 2025 cve

CNNVD ID

CNNVD-202510-1146

CVE-2025-11480

CNNVD Published: 2025-10-08

Description (Chinese)

SourceCodester Simple E-Commerce Bookstore是SourceCodester开源的一个简易电子商务书店。 SourceCodester Simple E-Commerce Bookstore 1.0版本存在SQL注入漏洞，该漏洞源于对文件/register.php中参数register_username的错误操作，可能导致SQL注入攻击。

Description (English)

SourceCodester Simple E-Commerce Bookstore is a simple e-commerce bookshop, which is an open-source source of SourceCodester. SourceCodester Simple E-Commerce Bookstore Version 1.0 has an injection loophole in SQL, which results from an error in the argument register username in file/register.php, which may lead to an attack on SQL injection.

Hazard Level

Medium

Vulnerability Type

SQL注入

Affected Vendor

SourceCodester

Published

2025-10-08

Last Modified

2026-02-24

References

https://github.com/DrNbnonono/CVE/issues/8 https://vuldb.com/?ctiid.327598 https://vuldb.com/?id.327598 https://vuldb.com/?submit.667391 https://www.sourcecodester.com/

Share on: