CVE-2025-11480

HIGH

Janobe Simple E-commerce Bookstore - Injection

Title source: rule

Description

A vulnerability was detected in SourceCodester Simple E-Commerce Bookstore 1.0. The affected element is an unknown function of the file /register.php. Performing manipulation of the argument register_username results in sql injection. The attack is possible to be carried out remotely. The exploit is now public and may be used.

References (5)

Scores

CVSS v3 7.3
EPSS 0.0002
EPSS Percentile 5.0%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Classification

CWE
CWE-74 CWE-89
Status published

Affected Products (1)

janobe/simple_e-commerce_bookstore

Timeline

Published Oct 08, 2025
Tracked Since Feb 18, 2026