VULNERABILITY INTELLIGENCE

CVE-2025-11066

CVSS score9.8 CRITICAL

EPSS probability0.48%

CISA KEVNot currently listed

Published2025-09-27

Last modified2026-10-09

Description

A flaw has been found in code-projects Online Bidding System 1.0. This impacts an unknown function of the file /administrator/bidlist.php. Executing manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit has been published and may be used.