CVE-2025-11654

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2025-11654
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-11654.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2025-11654
Published
2025-10-13T01:02:06Z
Modified
2026-10-08T02:48:58Z
Severity
  • 5.5 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P CVSS Calculator
Summary
yousaf530 Inferno Online Clothing Store log.php sql injection
Details

A vulnerability was identified in yousaf530 Inferno Online Clothing Store up to 827dd42bfbe380e8de76fdc67958c24cf1246208. The affected element is an unknown function of the file /log.php. Such manipulation of the argument cemail/password leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly available and might be used. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available. The vendor was contacted early about this disclosure but did not respond in any way.

Database specific 
{
    "cna_assigner": "VulDB",
    "cwe_ids": [
        "CWE-74",
        "CWE-89"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/11xxx/CVE-2025-11654.json"
}
References

Affected packages

Git / github.com/mhszed/report

Affected ranges

Type
GIT
Repo
https://github.com/mhszed/report
Events
Introduced
827dd42bfbe380e8de76fdc67958c24cf1246208
Last Affected
827dd42bfbe380e8de76fdc67958c24cf1246208

Affected versions

Other
827dd42bfbe380e8de76fdc67958c24cf1246208

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-11654.json"