Security Advisory

CVE-2026-37149

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-06-25 00:00:00
Last updated 2026-06-26 14:14:25
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

GROCERY-STORE-MANAGEMENT-SYSTEM-USING-PHP-AND-MYSQL-PHPMYADMIN v1.0 was discovered to contain a SQL injection vulnerability in the scost parameter in /grocery/search_products.php. This vulnerability allows attackers to access sensitive database information via a crafted SQL statement.