CVE-2025-11066 — code-projects Online Bidding System bidlist.php sql injection
A flaw has been found in code-projects Online Bidding System 1.0. This impacts an unknown function of the file /administrator/bidlist.php. Executing manipulation of the argument…
Published: 2025-09-27 · CVSS: 6.9 · CVSS 4.0
A flaw has been found in code-projects Online Bidding System 1.0. This impacts an unknown function of the file /administrator/bidlist.php. Executing manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit has been published and may be used.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7