CVE-2025-11066

Publication date

2025-09-27 14:32:06

Family

VulDB

State

PUBLISHED

Description

A flaw has been found in code-projects Online Bidding System 1.0. This impacts an unknown function of the file /administrator/bidlist.php. Executing manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit has been published and may be used.