CVE-2025-11558

CRITICAL 9.8CVE-2025-11558 · Published 09/10/2025 · updated 08/10/2026

Package	Affected versions	Patched versions
e-commerce website fabian	`= 1.0`	No fix yet

Description

A vulnerability was found in code-projects E-Commerce Website 1.0. Impacted is an unknown function of the file /pages/user_index_search.php. Performing manipulation of the argument Search results in sql injection. The attack is possible to be carried out remotely. The exploit has been made public and could be used.

References

code-projects.org · Product
cxm947/CVE-repoort-251008 · Exploit
vuldb.com · Permissions Required
vuldb.com · Third Party Advisory
vuldb.com · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free