MEDIUM
code-projects Medical Store Management System Update Company UpdateCompany.java sql injection
Published Aug 14, 2025
5.3
MEDIUMCVSS 4.0
EPSS 0.39%
Description
A vulnerability was found in code-projects Medical Store Management System 1.0. This issue affects some unknown processing of the file UpdateCompany.java of the component Update Company Page. The manipulation of the argument companyNameTxt leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected products
-
- Version 1.0StatusaffectedConstraints-
- Version
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Code-Projects | Medical Store Management System | n/a |
|
- 1.0
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (2)
References (7)
- https://code-projects.org/ product
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-24654 Advisory
- https://vuldb.com/?ctiid.319889 signaturepermissions-requiredPermissions RequiredVDB Entry
- https://vuldb.com/?id.319889 vdb-entrytechnical-descriptionThird Party AdvisoryVDB Entry
- https://vuldb.com/?submit.631663 third-party-advisoryThird Party AdvisoryVDB Entry
- https://www.yuque.com/gongzi-jsnek/xb2q3a/uv3gmxc8tpmbg4vw#vulnerability-details-and-poc exploitThird Party Advisory
- https://www.yuque.com/gongzi-jsnek/xb2q3a/uv3gmxc8tpmbg4vw?singleDoc relatedExploitThird Party Advisory
| Link | Providers | Tags |
|---|---|---|
| https://code-projects.org/ | product | |
| https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-24654 | Advisory | |
| https://vuldb.com/?ctiid.319889 | signaturepermissions-requiredPermissions RequiredVDB Entry | |
| https://vuldb.com/?id.319889 | vdb-entrytechnical-descriptionThird Party AdvisoryVDB Entry | |
| https://vuldb.com/?submit.631663 | third-party-advisoryThird Party AdvisoryVDB Entry | |
| https://www.yuque.com/gongzi-jsnek/xb2q3a/uv3gmxc8tpmbg4vw#vulnerability-details-and-poc | exploitThird Party Advisory | |
| https://www.yuque.com/gongzi-jsnek/xb2q3a/uv3gmxc8tpmbg4vw?singleDoc | relatedExploitThird Party Advisory |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner VulDB
Published Aug 14, 2025
Updated Aug 14, 2025
Reserved Aug 13, 2025
Link CVE-2025-8930
CISA Vulnrichment
Updated Aug 14, 2025
ENISA EUVD
EUVD-2025-24654 Assigner VulDB
Published Aug 14, 2025
Updated Aug 14, 2025
Exploited since n/a
Link EUVD-2025-24654