CNNVD-202508-3692 Information

CNNVD ID

CNNVD-202508-3692

CVE-2025-9749

  • CNNVD Published: 2025-08-31

Description (Chinese)

Grocery List Management Web App是Ritesh Dhurve个人开发者的一个杂货清单管理系统。 Grocery List Management Web App存在安全漏洞,该漏洞源于对文件/src/update.php中参数ID的错误操作导致SQL注入攻击。

Description (English)

Grocery List Management Web App is a groceries inventory management system for the individual developers of Ritesh Dhurve. There is a security loophole in the Grocery List Management Web App, which stems from an error in the operation of parameter ID in document/src/update.php, which resulted in an attack on SQL.

Hazard Level

Medium

Vulnerability Type

其他

Affected Vendor

个人开发者

Published

2025-08-31

Last Modified

2026-02-24

References

https://gist.github.com/0xSebin/a163239e0132d7d58ef1300f321da819#steps-to-reproduce https://vuldb.com/?submit.640488 https://vuldb.com/?id.322050 https://vuldb.com/?ctiid.322050 https://access.redhat.com/security/cve/cve-2025-9749 https://nvd.nist.gov/vuln/detail/CVE-2025-9749

Share on: