CVE-2025-8928: code-projects Medical Store Management System Update Medicines UpdateMedicines.java sql injection

Published Aug 13, 2025

Updated

A vulnerability was identified in code-projects Medical Store Management System 1.0. This affects an unknown part of the file UpdateMedicines.java of the component Update Medicines Page. The manipulation of the argument productNameTxt leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

Affected Software

2 affected components

Code-projects Medical Store Management System

Fabian Medical Store Management System=1.0

Event History

Aug 13, 2025

CVE Published

via MITRE·10:02 PM

Data Sourced

via MITRE·10:02 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·10:15 PM

DescriptionSeverityWeaknessAffected Software

Sep 18, 57920

Event

via FIRST·03:37 AM

Frequently Asked Questions

What is the severity of CVE-2025-8928?

CVE-2025-8928 is classified as a high severity vulnerability due to its potential for SQL injection attacks.

How do I fix CVE-2025-8928?

To fix CVE-2025-8928, sanitize and parameterize input fields in UpdateMedicines.java to prevent SQL injection.

What component is affected by CVE-2025-8928?

CVE-2025-8928 affects the Update Medicines Page in the Medical Store Management System 1.0.

What type of vulnerability is CVE-2025-8928?

CVE-2025-8928 is an SQL injection vulnerability that allows attackers to manipulate database queries.

Who is affected by CVE-2025-8928?

Users of the Medical Store Management System version 1.0 are at risk due to CVE-2025-8928.