CVE-2025-11104

ALTO 8.8CVE-2025-11104 · Published 28/09/2025 · updated 09/10/2026

Package	Affected versions	Patched versions
electricity billing system codeastro	`= 1.0`	No fix yet

Description

A vulnerability was detected in CodeAstro Electricity Billing System 1.0. Affected by this issue is some unknown functionality of the file /admin/bill.php. The manipulation of the argument uid results in sql injection. The attack may be launched remotely. The exploit is now public and may be used.

References

codeastro.com · Product
WANGshuyan2025/cve · Exploit
vuldb.com · Permissions Required
vuldb.com · Third Party Advisory
vuldb.com · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free