> CVE-2026-37149

« BACK_TO_HOME
PUBLISHED
2026-06-25 20:17
MODIFIED
2026-06-25 20:21
EPSS (Prob. Exploit)
0.22%
Top 88.4%
DATA SOURCES:
NVD 🔗 2026-06-25 FIRST EPSS 🔗 2026-10-25

> DESCRIPTION

GROCERY-STORE-MANAGEMENT-SYSTEM-USING-PHP-AND-MYSQL-PHPMYADMIN v1.0 was discovered to contain a SQL injection vulnerability in the scost parameter in /grocery/search_products.php. This vulnerability allows attackers to access sensitive database information via a crafted SQL statement.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> HISTORIQUE DES MODIFICATIONS

Première apparition
25/06/2026 20:17
Source: NVD
Total des modifications: 0 Dernière mise à jour: 4 months ago

> REFERENCES

https://github.com/anirudhkannanvp/GROCERY-STORE-MANAGEMENT-SYSTEM-USING-PHP-AND...
https://github.com/pateldhyeyit/CVE-2026-37149
https://owasp.org/www-community/attacks/SQL_Injection
« BACK_TO_HOME