CVE-2025-11608

A security vulnerability has been detected in code-projects E-Banking System 1.0. This affects an unknown function of the file /register.php of the component POST Parameter Handler. The manipulation of the argument username/password leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used.

Score

CVSS 3.1 9.8 Critical

Status

Analyzed - cna@vuldb.com

Published

2025-10-11

Last modified

2026-10-08

Weaknesses

CWE-74, CWE-89

Affected products

• E-banking System (Code-projects)
• Simple E-banking System (Fabian)

References

• https://vuldb.com/?id.327930
• https://vuldb.com/?ctiid.327930
• https://vuldb.com/?submit.672559
• https://github.com/lakshayyverma/CVE-Discovery/blob/main/E-Banking%20System%20SQLi.md
• https://code-projects.org/