CVE-2025-65354
Improper input handling in /Grocery/search_products_itname.php inPuneethReddyHC event-management 1.0 permits SQL injection via the sitem_name POST parameter. Crafted payloads can alter query logic and disclose database contents. Exploitation may result in sensitive data disclosure and backend compromise.
Vendor
Product
CWE
Yayın Tarihi
2025-12-23 20:15:46
Güncelleme
2026-01-06 17:17:13
Source Identifier
cve@mitre.org
KEV Date Added
-