CVE-2025-63939 PUBLISHED

Assigner: mitre
Reserved: 27.10.2025 Published: 14.04.2026 Updated: 14.04.2026

Improper input handling in /Grocery/search_products_itname.php, in anirudhkannan Grocery Store Management System 1.0, allows SQL injection via the sitem_name POST parameter.

Metrics

CVSS 3.1

CVSS Vector: CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:N/S:U/UI:N
CVSS Score: 9.8

Attack Vector	Network	Scope	Unchanged
Attack Complexity	Low	Confidentiality Impact	High
Privileges Required	None	Integrity Impact	High
User Interaction	None	Availability Impact	High

CVSS 3.1

Product Status

Vendor	n/a
Product	n/a
Versions	Version n/a is affected

References

https://github.com/TREXNEGRO/Security-Advisories/tree/main/CVE-2025-63939

Problem Types

n/a text