CVE-2025-11594 - CVE House
Back to Database
Status published Medium CVE-2025-11594

ywxbear PHP-Bookstore-Website-Example Quantity index.php improper validation of specified quantity in input

Vulnerability Description

A vulnerability has been found in ywxbear PHP-Bookstore-Website-Example and PHP Basic BookStore Website up to 0e0b9f542f7a2d90a8d7f8c83caca69294e234e4. This issue affects some unknown processing of the file /index.php of the component Quantity Handler. Such manipulation leads to improper validation of specified quantity in input. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. This product operates on a rolling release basis, ensuring continuous delivery. Consequently, there are no version details for either affected or updated releases.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-11594

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • lianhaorui (VulDB User)

References

Affected Vendor

Affected Software

PHP-Bookstore-Website-Example, PHP Basic BookStore Website
Vulnerable Versions:
0e0b9f542f7a2d90a8d7f8c83caca69294e234e4

Timeline

Official Publish: October 11th, 2025
Last Modified: October 14th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:P/RL:X/RC:R

Weaknesses (CWE)

CWE-1284 CWE-703

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.