CVE-2025-11430 : faille critique janobe simple e-commerce bookstore (CVSS 9.8)

A vulnerability was found in SourceCodester Simple E-Commerce Bookstore 1.0. The affected element is an unknown function of the file /cart.php. The manipulation of the argument remove results in sql injection. The attack can be executed remotely. The exploit has been made public and could be used.

Sévérité

Critique (CVSS 9.8)

Vecteur CVSS

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitation active

Non signalée par la CISA

Publication

8 oct. 2025

Dernière mise à jour

17 juin 2026

• janobe simple e-commerce bookstore

• Fiche CVE-2025-11430 sur le NVD (NIST)
• github.com/DrNbnonono/CVE/issues/2
• vuldb.com/
• vuldb.com/
• vuldb.com/
• sourcecodester.com/