5.3
/ 10
MEDIUM
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Description
A vulnerability was found in code-projects Medical Store Management System 1.0. This issue affects some unknown processing of the file UpdateCompany.java of the component Update Company Page. The manipulation of the argument companyNameTxt leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Basic Information
ID
CVE-2025-8930
Source
VulDB
Published
Aug 14, 2025 at 02:32
Affected Product
Vendor
code-projects
Product
Medical Store Management System
Version
1.0
Affected Versions
code-projects Medical Store Management System 1.0