VulnSocial

CVE-2025-63939Disclosure

LOWCVSS 9.8 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Improper input handling in /Grocery/search_products_itname.php, in anirudhkannan Grocery Store Management System 1.0, allows SQL injection via the sitem_name POST parameter.

Back to dashboard
0.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-89

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

  • 3 mentions across 3 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 3 signals
  • Disclosure: 2 classified signals
  • General: 1 classified signal
  • Peaked 2d ago at 1 mentions (2026-04-14); latest day: 1
  • 3 total mentions across 3 days

Deep dive

Activity timeline3 mentions / 3d
00111Mentions · 2026-04-14: 1Mentions · 2026-04-15: 1Mentions · 2026-04-19: 1Technical Details · 2026-04-14: 1Technical Details · 2026-04-15: 1Technical Details · 2026-04-19: 104-1404-1504-19
Signal classification2 categories
Disclosure
266.7%
General
133.3%
Referenced assets3 URLs
Classification over time
DateTotalLabels
2026-04-141
Disclosure1
2026-04-151
General1
2026-04-191
Disclosure1
Full discourse3 posts
  • CVE@CVEnew
    Disclosure

    CVE-2025-63939 Improper input handling in /Grocery/search_products_itname.php, in anirudhkannan Grocery Store Management System 1.0, allows SQL injection via the sitem_name POST par… https://www.cve.org/CVERecord?id=CVE-2025-63939

    Post summary

    The text reports a newly disclosed CVE (CVE‑2025‑63939) that enables SQL injection in a Grocery Store Management System via improper input handling on a specific PHP file.

    00000146
    57.2K followersView on X
  • CTIWatch@ctiwatchcloud
    General

    🔍 Today's Top Vulnerabilities 🔴 CVE-2026-35031 | CVSS 9.9 🔴 CVE-2026-38526 | CVSS 9.9 🔴 CVE-2025-63939 | CVSS 9.8 🔗 http://ctiwatch.cloud/vulnerabilities #CVE #Vulnerability #ThreatIntel

    Post summary

    The tweet simply lists three high‑severity CVEs with their CVSS scores and a link to a vulnerable resource page, offering no evidence of exploitation, PoC, or remediation steps.

    00000302
    5.6K followersView on X
  • Kaitan ID Security@KaitanSecurity
    Disclosure

    🚨 CRITICAL — CVE-2025-63939 Improper input handling in /Grocery/search_products_itname.php, in anirudhkannan Grocery Store Management System 1.0, a… CVSS 9.8 🔴 No patch yet Full analysis → https://sec.kaitan.id/cves/CVE-2025-63939 #HP #CyberSecurity #InfoSec

    Post summary

    This post announces the discovery of CVE‑2025‑63939, a critical input handling flaw with a high CVSS score, noting that no patch is yet available.

    000000
    144 followersView on X

Explore more

Back to dashboard