CVE-2025-65354

n/a / n/a PUBLISHED

Description (CNA)

Improper input handling in /Grocery/search_products_itname.php inPuneethReddyHC event-management 1.0 permits SQL injection via the sitem_name POST parameter. Crafted payloads can alter query logic and disclose database contents. Exploitation may result in sensitive data disclosure and backend compromise.

Affected (CNA)

Vendor / product	Versions
n/a / n/a	affected n/a

CWE

No CWE identifiers supplied.

References

https://github.com/amaansiddd787/CVE-2025-65354

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.