Critical · 9.8 CVE-2025-63939 EUVD-2025-209441GHSA-25qr-g262-c7jp

Improper input handling in /Grocery/search_products_itname.php, in anirudhkannan Grocery Store Management System 1.0, allows SQL injection …

Published Apr 14, 2026 · Updated Apr 14, 2026 · Assigned by mitre

Description

Improper input handling in /Grocery/search_products_itname.php, in anirudhkannan Grocery Store Management System 1.0, allows SQL injection via the sitem_name POST parameter.

References

https://github.com/TREXNEGRO/Security-Advisories/tree/main/CVE-2025-63939