CVE-2025-11357
MediumCVSS 6.3Exploitation Probability (EPSS)
Low risk24th percentile - higher than 24% of all known CVEs
Summary
In code-projects Simple Banking System 1.0, a security flaw exists in some unknown processing of the file /createuser.php. Manipulation of the argument Name results in SQL injection. The attack may be initiated remotely, and the exploit has been released.
Risk Assessment
The risk includes potential unauthorized creation of accounts or modification of user data in the banking system.
Recommendation
Update the system and apply proper input validation mechanisms in /createuser.php.
Other vulnerabilities in Simple Banking System
See all- CVE-2025-11359Medium
In code-projects Simple Banking System 1.0, a SQL injection vulnerability exists in an unknown function of the file /transfermoney.php. Manipulation of the argument ID leads to SQL injection. The attack can be performed remotely, and the exploit has been publicly disclosed.
- CVE-2025-11358Medium
In code-projects Simple Banking System 1.0, a weakness exists in an unknown function of the file /removeuser.php. Manipulation of the argument ID can lead to SQL injection. The attack may be launched remotely, and the exploit has been made public.
Original NVD description (English source)
A security flaw has been discovered in code-projects Simple Banking System 1.0. This issue affects some unknown processing of the file /createuser.php. Performing manipulation of the argument Name results in sql injection. The attack may be initiated remotely. The exploit has been released to the public and may be exploited.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS