A vulnerability marked as critical has been reported in SourceCodester Simple E-Commerce Bookstore 1.0. The affected element is an unknown function of the file /register.php. Performing manipulation of the argument register_username results in sql injection.
This vulnerability is reported as CVE-2025-11480. The attack is possible to be carried out remotely. Moreover, an exploit is present.
