CVE-2025-11475: High SQL Injection in projectworlds Library System
CVE-2025-11475 is a High SQL injection in projectworlds Library System 1.0 via view_member.php. No fix is listed, so restrict access and fix the query.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
CVE-2025-11475 is a High SQL injection in projectworlds Library System 1.0 via view_member.php. No fix is listed, so restrict access and fix the query.
CVE-2025-11474 is a Medium SQL injection in SourceCodester Hotel and Lodge 1.0. No fix is listed. Restrict access, use prepared statements, ask the vendor.
CVE-2025-11473 is a High SQL injection in SourceCodester Hotel and Lodge 1.0 via edit_curr.php. No fix is listed, so restrict access and fix the query.
CVE-2025-11472 is a High SQL injection in SourceCodester Hotel and Lodge 1.0 via edit_room.php. No fix is listed, so restrict access and fix the query.
CVE-2025-11471 is a High SQL injection in SourceCodester Hotel and Lodge 1.0 via edit_customer.php. No fix is listed, so restrict access and fix the query.
CVE-2025-11469 is a Medium SQL injection in SourceCodester Hotel and Lodge 1.0. No fix is listed. Restrict access, use prepared statements, ask the vendor.
CVE-2025-11434 is a High SQL injection in itsourcecode Transcript System 1.0 via login.php. No fix is listed. Restrict access and use prepared statements.
CVE-2025-11432 is a High SQL injection in itsourcecode Leave Management 1.0 via reset.php. No fix is listed. Restrict access and use prepared statements.
CVE-2025-11431 is a Medium SQL injection in code-projects Inventory POS 1.0 via transaction.php. No fix is listed, so restrict access and fix the query.
Weekly insights on software supply chain security, delivered to your inbox.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.