CVE-2025-11594

MediumCVSS 5.3/10Last modified Oct 18, 2026

Description

A vulnerability has been found in ywxbear PHP-Bookstore-Website-Example and PHP Basic BookStore Website up to 0e0b9f542f7a2d90a8d7f8c83caca69294e234e4. This issue affects some unknown processing of the file /index.php of the component Quantity Handler. Such manipulation leads to improper validation of specified quantity in input. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. This product operates on a rolling release basis, ensuring continuous delivery. Consequently, there are no version details for either affected or updated releases.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Weakness enumeration

CWE-703CWE-1284

Affected software

No affected versions have been published.

Timeline

Published
Oct 11, 2025
Last modified
Oct 18, 2026
NVD status
Deferred

Related CVEs from 2025

CVE-2025-115959.8A vulnerability was found in Campcodes Online Apartment Visitor Management System 1.0. Impacted is an unknown function of the file /admin-prCVE-2025-115969.8A vulnerability was determined in code-projects E-Commerce Website 1.0. The affected element is an unknown function of the file /pages/deletCVE-2025-115979.8A vulnerability was identified in code-projects E-Commerce Website 1.0. The impacted element is an unknown function of the file /pages/produCVE-2025-115981.0In mObywatel iOS application an unauthorized user can use the App Switcher to view the account owner's personal information in the minimizedCVE-2025-115999.8A weakness has been identified in Campcodes Online Apartment Visitor Management System 1.0. This impacts an unknown function of the file /foCVE-2025-11609.8A vulnerability was found in SourceCodester Employee Management System 1.0. It has been rated as critical. Affected by this issue is some unCVE-2025-116008.8A security vulnerability has been detected in code-projects Simple Food Ordering System 1.0. Affected is an unknown function of the file ediCVE-2025-116019.8A vulnerability was detected in SourceCodester Online Student Result System 1.0. Affected by this vulnerability is an unknown functionality CVE-2025-116026.3Potential information leak in bolt protocol handshake in Neo4j Enterprise and Community editions allows attacker to obtain one byte of inforCVE-2025-116038.8A vulnerability was found in code-projects Simple Food Ordering System 1.0. This vulnerability affects unknown code of the file /editproductCVE-2025-116049.8A vulnerability was determined in projectworlds Online Ordering Food System 1.0. This issue affects some unknown processing of the file /allCVE-2025-116058.8A vulnerability was identified in code-projects Client Details System 1.0. Impacted is an unknown function of the file /admin/update-profile
CVE-2025-11594: Medium severity, CVSS 5.3 | Vulnix