Lucene search
+L

22 matches found

Kitploit
Kitploit
•added 2026/10/10 6:46 p.m.•19 views

CVE-2025-63943

CVE-2025-63943 — ثغرة حقن SQL في نظام إدارة متجر البقالة 1.0 نظرة عامة تم تحديد ثغرة حقن SQL عالية الخطورة في مكوّن searchproducts.php من Grocery Store Management System 1.0 ، وهو تطبيق ويب مبني على PHP/MySQL من إنشاء anirudhkannan. تنشأ المشكلة من عدم التحقق السليم من المدخلات والبناء غير الآمن...

6AI score
SaveExploits1References1
Kitploit
Kitploit
•added 2026/10/06 10:13 a.m.•18 views

CVE-2026-37149

CVE-2026-37149 حقن SQL في GROCERY-STORE-MANAGEMENT-SYSTEM-USING-PHP-AND-MYSQL-PHPMYADMIN v1.0 نظرة عامة معرف CVE: CVE-2026-37149 نوع الثغرة: حقن SQL CWE-89 الخطورة: عالية المكتشف: Dhyey Patel الوصف يحتوي GROCERY-STORE-MANAGEMENT-SYSTEM-USING-PHP-AND-MYSQL-PHPMYADMIN v1.0 على ثغرة حقن SQL في المعا...

7.7CVSS5.8AI score0.00217EPSS
SaveExploits0References2
NVD
NVD
•added 2026/06/25 8:17 p.m.•17 views

CVE-2026-37149

GROCERY-STORE-MANAGEMENT-SYSTEM-USING-PHP-AND-MYSQL-PHPMYADMIN v1.0 was discovered to contain a SQL injection vulnerability in the scost parameter in /grocery/searchproducts.php. This vulnerability allows attackers to access sensitive database information via a crafted SQL statement...

7.7CVSS0.00217EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/25 12:00 a.m.•3 views

CVE-2026-37149: Improper Neutralization of Special Elements used in an SQL Command

GROCERY-STORE-MANAGEMENT-SYSTEM-USING-PHP-AND-MYSQL-PHPMYADMIN v1.0 was discovered to contain a SQL injection vulnerability in the scost parameter in /grocery/searchproducts.php. This vulnerability allows attackers to access sensitive database information via a crafted SQL statement...

7.7CVSS5.8AI score0.00217EPSS
SaveExploits0References2
CVE
CVE
•added 2026/06/25 12:00 a.m.•38 views

CVE-2026-37149

The GROCERY-STORE-MANAGEMENT-SYSTEM-USING-PHP-AND-MYSQL-PHPMYADMIN v1.0 software is susceptible to a SQL injection vulnerability (CWE-89) within the /grocery/search_products.php endpoint. The root cause is the improper validation of user-supplied input in the scost POST parameter, which allows an...

7.7CVSS5.8AI score0.00217EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/06/20 12:00 a.m.•40 views

PT-2026-51178

Name of the Vulnerable Software and Affected Versions GROCERY-STORE-MANAGEMENT-SYSTEM-USING-PHP-AND-MYSQL-PHPMYADMIN version 1.0 Description An issue exists where a crafted SQL statement can be used to access sensitive database information. This occurs via the scost parameter in the...

7.7CVSS5.9AI score0.00217EPSS
SaveExploits0References7
RedhatCVE
RedhatCVE
•added 2026/06/05 7:41 p.m.•19 views

CVE-2025-63939

Improper input handling in /Grocery/searchproductsitname.php, in anirudhkannan Grocery Store Management System 1.0, allows SQL injection via the sitemname POST parameter...

9.8CVSS5.6AI score0.00269EPSS
SaveExploits1References1
EUVD
EUVD
•added 2026/04/14 6:30 p.m.•16 views

EUVD-2025-209441

Improper input handling in /Grocery/searchproductsitname.php, in anirudhkannan Grocery Store Management System 1.0, allows SQL injection via the sitemname POST parameter...

9.8CVSS5.9AI score0.00269EPSS
SaveExploits1References2
NVD
NVD
•added 2026/04/14 4:16 p.m.•19 views

CVE-2025-63939

Improper input handling in /Grocery/searchproductsitname.php, in anirudhkannan Grocery Store Management System 1.0, allows SQL injection via the sitemname POST parameter...

9.8CVSS0.00269EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2026/04/14 12:00 a.m.•39 views

CVE-2025-63939

Improper input handling in /Grocery/searchproductsitname.php, in anirudhkannan Grocery Store Management System 1.0, allows SQL injection via the sitemname POST parameter...

9.8CVSS0.00269EPSS
SaveExploits1References1
CVE
CVE
•added 2026/04/14 12:00 a.m.•19 views

CVE-2025-63939

CVE-2025-63939 affects the anirudhkannan Grocery Store Management System 1.0. The vulnerability is caused by improper input handling in /Grocery/search_products_itname.php, allowing SQL injection via the sitem_name POST parameter. The entry carries a CVSS v3.1 base score of 9.8 (CRITICAL) with NE...

9.8CVSS5.8AI score0.00269EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/14 12:00 a.m.•3 views

CVE-2025-63939: Improper Neutralization of Special Elements used in an SQL Command

Improper input handling in /Grocery/searchproductsitname.php, in anirudhkannan Grocery Store Management System 1.0, allows SQL injection via the sitemname POST parameter...

9.8CVSS5.8AI score0.00269EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2026/04/14 12:00 a.m.•18 views

PT-2026-32655

CVE-2025-63939 Improper input handling in /Grocery/search products itname.php, in anirudhkannan Grocery Store Management System 1.0, allows SQL injection via the sitem name POST par… https://t.co/EsfS1EVZpb...

9.8CVSS5.8AI score0.00269EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2026/04/14 12:00 a.m.•7 views

CVE-2025-63939

Improper input handling in /Grocery/searchproductsitname.php, in anirudhkannan Grocery Store Management System 1.0, allows SQL injection via the sitemname POST parameter...

9.8CVSS5.8AI score0.00269EPSS
SaveExploits1References1
Packet Storm
Packet Storm
•added 2025/11/14 12:00 a.m.•243 views

📄 Grocery Store Management System 1.0 SQL Injection

Grocery Store Management System version 1.0 appears to suffer from a remote SQL injection vulnerability in searchproducts.php. CVE-2025-63943 — SQL Injection in Grocery Store Management System 1.0 Overview A high-severity SQL Injection vulnerability was identified in the searchproducts.php...

8.2AI score
SaveExploits1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2020-20619

Malware in sbrugna...

9.8CVSS8.1AI score0.02107EPSS
SaveExploits1References3
Packet Storm
Packet Storm
•added 2020/12/23 12:00 a.m.•215 views

Sales And Inventory System For Grocery Store 1.0 Cross Site Scripting

Exploit Title: Sales and Inventory System for Grocery Store 1.0 - Multiple Stored XSS Exploit Author: Vijay Sachdeva pwnshell Date: 2020-12-23 Vendor Homepage: https://www.sourcecodester.com/php/11238/sales-and-inventory-system-grocery-store.html Software Link:...

7.4AI score
SaveExploits0
NVD
NVD
•added 2020/11/17 8:15 p.m.•35 views

CVE-2020-28133

An issue was discovered in SourceCodester Simple Grocery Store Sales And Inventory System 1.0. There was authentication bypass in web login functionality allows an attacker to gain client privileges via SQL injection in salesinventory/login.php...

9.8CVSS10AI score0.02107EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2020/11/17 12:00 a.m.•4 views

PT-2020-16931

Name of the Vulnerable Software and Affected Versions SourceCodester Simple Grocery Store Sales And Inventory System version 1.0 Description An issue was discovered in the web login functionality, allowing authentication bypass. This enables an attacker to gain client privileges via SQL injection...

9.8CVSS0.02107EPSS
SaveExploits1References7
CNNVD
CNNVD
•added 2020/11/17 12:00 a.m.•20 views

Sourcecodester SourceCodester Grocery Store Sales And Inventory System SQL注入漏洞

Sourcecodester SourceCodester Grocery Store Sales And Inventory System is a grocery store sales and inventory management system from SourceCodester USA. A SQL injection vulnerability exists in SourceCodester Grocery Store Sales And Inventory System version 1.0, which can be exploited by an attack...

9.8CVSS7.3AI score0.02107EPSS
SaveExploits1References3
Rows per page
Query Builder