CVE-2025-8929: code-projects Medical Store Management System MainPanel.java sql injection

Published Aug 13, 2025

Updated

A vulnerability has been found in code-projects Medical Store Management System 1.0. This vulnerability affects unknown code of the file MainPanel.java. The manipulation of the argument searchTxt leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

Affected Software

2 affected components

Code-projects Medical Store Management System

Fabian Medical Store Management System=1.0

Event History

Aug 13, 2025

CVE Published

via MITRE·10:02 PM

Data Sourced

via MITRE·10:02 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·10:15 PM

DescriptionSeverityWeaknessAffected Software

Oct 6, 57909

Event

via FIRST·06:07 AM

Frequently Asked Questions

What is the severity of CVE-2025-8929?

CVE-2025-8929 is considered a high severity vulnerability due to its potential for remote SQL injection attacks.

How do I fix CVE-2025-8929?

To fix CVE-2025-8929, sanitize user inputs in the searchTxt argument and use prepared statements to prevent SQL injection.

Can CVE-2025-8929 be exploited remotely?

Yes, CVE-2025-8929 can be exploited remotely, allowing an attacker to manipulate the database.

Which software is affected by CVE-2025-8929?

CVE-2025-8929 affects the Medical Store Management System version 1.0.

What is SQL injection in relation to CVE-2025-8929?

SQL injection in relation to CVE-2025-8929 refers to the exploitation of insufficient input validation in the searchTxt argument to execute arbitrary SQL code.