by Kastro
Paper/Archive/CVE-2025-63939

CVE-2025-63939

mitre — Improper input handling in /Grocery/search_products_itname.php, in anirudhkannan Grocery Store Management System 1.0, allows SQL injectio…

EPSS 0.3%CVSS 9.8
critical.is priorityof 100
33
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 19.1.191 × 203.8No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Improper input handling in /Grocery/search_products_itname.php, in anirudhkannan Grocery Store Management System 1.0, allows SQL injection via the sitem_name POST parameter.

Affected

ProductAffectedFixed inSource
n/an/a–CNA

Scores by source

mitre (CNA)9.8CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:N/S:U/UI:N
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: partial

References

refgithub.com/TREXNEGRO/Security-Advisories/tree/main/CVE-2025-63939