CVE-2025-11597: Medium SQL Injection in E-Commerce Website
SQL injection in code-projects E-Commerce Website 1.0 via prod_id. No fixed version is listed, so take it offline or fix the query and restrict access.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
SQL injection in code-projects E-Commerce Website 1.0 via prod_id. No fixed version is listed, so take it offline or fix the query and restrict access.
High SQL injection in code-projects E-Commerce Website via order_id. No fixed version is confirmed, so limit access and switch to prepared statements.
Medium SQL injection in Online Apartment Visitor Management System via mobilenumber. No fix is confirmed; limit access and use prepared statements.
High severity stack overflow in Tenda AC7 firmware 15.03.06.44 via the setNotUpgrade handler. No fix confirmed; turn off remote access and check Tenda.
High SQL injection in Project Monitoring System via uid in /useredit.php. No fixed version is confirmed; limit exposure and use prepared statements.
High SQL injection in Online Job Search Engine. No fix is confirmed, so limit access, use prepared statements and check the vendor for updates.
High SQL injection in Online Job Search Engine via txtjobID in /postjob.php. No fixed version is confirmed; limit exposure and use prepared statements.
High SQL injection in Online Job Search Engine. No fix is confirmed, so limit access, use prepared statements and check the vendor for updates.
High SQL injection in code-projects E-Commerce Website via Search. No fixed version is confirmed, so limit access and switch to prepared statements.
Weekly insights on software supply chain security, delivered to your inbox.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.