A vulnerability was found in code-projects Simple Scheduling System 1.0. This affects an unknown part of the file /add.home.php. The manipulation of the argument faculty results in sql injection. The attack can be executed remotely. The exploit has been made public and could be used. Other parameters might be affected as well.
References
Link | Resource |
---|---|
https://code-projects.org/ | Product |
https://github.com/yihaofuweng/cve/issues/42 | Exploit Third Party Advisory |
https://vuldb.com/?ctiid.326197 | Permissions Required VDB Entry |
https://vuldb.com/?id.326197 | Third Party Advisory VDB Entry |
https://vuldb.com/?submit.662701 | Third Party Advisory VDB Entry |
Configurations
History
03 Oct 2025, 13:37
Type | Values Removed | Values Added |
---|---|---|
CPE | cpe:2.3:a:fabianros:simple_scheduling_system:1.0:*:*:*:*:*:*:* | |
First Time |
Fabianros simple Scheduling System
Fabianros |
|
References | () https://code-projects.org/ - Product | |
References | () https://github.com/yihaofuweng/cve/issues/42 - Exploit, Third Party Advisory | |
References | () https://vuldb.com/?ctiid.326197 - Permissions Required, VDB Entry | |
References | () https://vuldb.com/?id.326197 - Third Party Advisory, VDB Entry | |
References | () https://vuldb.com/?submit.662701 - Third Party Advisory, VDB Entry |
28 Sep 2025, 19:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2025-09-28 19:15
Updated : 2025-10-03 13:37
NVD link : CVE-2025-11116
Mitre link : CVE-2025-11116
CVE.ORG link : CVE-2025-11116
JSON object : View
Products Affected
fabianros
- simple_scheduling_system