{"id":"CVE-2025-11116","title":"A vulnerability was found in code-projects Simple Scheduling System 1.0","summary":"A vulnerability was found in code-projects Simple Scheduling System 1.0. This affects an unknown part of the file /add.home.php. The manipulation of the argument faculty results in sql injection. The attack can be executed remotely. The …","severity":"high","cvss":7.3,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cwe":["CWE-74","CWE-89"],"vendor":"fabian","product":"simple_scheduling_system","affected":["simple_scheduling_system = 1.0"],"published":"2025-09-28","updated":"2026-09-30","sourceUpdated":"2026-09-30T23:10:00.237","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-11116","references":[{"url":"https://code-projects.org/","label":"cna@vuldb.com"},{"url":"https://github.com/yihaofuweng/cve/issues/42","label":"cna@vuldb.com"},{"url":"https://vuldb.com/?ctiid.326197","label":"cna@vuldb.com"},{"url":"https://vuldb.com/?id.326197","label":"cna@vuldb.com"},{"url":"https://vuldb.com/?submit.662701","label":"cna@vuldb.com"}],"tags":["nvd"],"epss":0.00478,"epssPercentile":0.38937,"ingestedAt":"2026-09-30T23:29:32.411Z","slug":"CVE-2025-11116","body":"## Overview\n\nA vulnerability was found in code-projects Simple Scheduling System 1.0. This affects an unknown part of the file /add.home.php. The manipulation of the argument faculty results in sql injection. The attack can be executed remotely. The exploit has been made public and could be used. Other parameters might be affected as well.\n\n## Affected\n\n- `simple_scheduling_system = 1.0`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":40,"depthScoreParts":{"impact":40.2,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}