A vulnerability was found in code-projects E-Commerce Website 1.0. It has been declared as critical. This affects an unknown function of the file /pages/admin_account_update.php. Such manipulation of the argument user_id leads to sql injection.
This vulnerability is uniquely identified as CVE-2025-11036. The attack can be launched remotely. Moreover, an exploit is present.
