CRITICAL
anirudhkannan
CVE published 2026-04-14
CVE-2025-63939
A critical SQL injection vulnerability exists in the Grocery Store Management System 1.0, specifically in the /Grocery/search_products_itname.php file, allowing attackers to inject malicious SQL code via the sitem_name POST parameter. This issue has a CVSS score of 9.8 and is considered critical. The vulnerability allows attackers to manipulate database queries, potentially leading to unauthorized data ac [truncated]