VYPR
High severity7.3NVD Advisory· Published Oct 8, 2025· Updated Apr 29, 2026

CVE-2025-11480

CVE-2025-11480

Description

A vulnerability was detected in SourceCodester Simple E-Commerce Bookstore 1.0. The affected element is an unknown function of the file /register.php. Performing manipulation of the argument register_username results in sql injection. The attack is possible to be carried out remotely. The exploit is now public and may be used.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • cpe:2.3:a:janobe:simple_e-commerce_bookstore:1.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:janobe:simple_e-commerce_bookstore:1.0:*:*:*:*:*:*:*
    • (no CPE)range: =1.0

Patches

Vulnerability mechanics

References

5

News mentions

0

No linked articles in our index yet.