CNNVD-202510-1214 Information

CNNVD ID

CNNVD-202510-1214

CVE-2025-11530

  • CNNVD Published: 2025-10-09

Description (Chinese)

Code-Projects Online Complaint Site是Code-Projects的一个在线投诉网站。 Code-Projects Online Complaint Site 1.0版本存在SQL注入漏洞,该漏洞源于对文件/cms/admin/state.php中参数state的错误操作,可能导致SQL注入攻击。

Description (English)

Code-Projects Online Complain Site is an online complaint website for Code-Projects. Code-Projects Online Complain Site 1.0 has an injection loophole in SQL, which results from an error in the state of the parameter in the file/cms/admin/state.php, which may result in an SQL injection attack.

Hazard Level

Medium

Vulnerability Type

SQL注入

Affected Vendor

Code-Projects

Published

2025-10-09

Last Modified

2026-02-24

References

https://code-projects.org/ https://github.com/xmqaq/cve/issues/1 https://vuldb.com/?ctiid.327668 https://vuldb.com/?id.327668 https://vuldb.com/?submit.670208 https://access.redhat.com/security/cve/cve-2025-11530

Share on: