CVE-2025-8931: code-projects Medical Store Management System ChangePassword.java sql injection

Published Aug 14, 2025

Updated

A vulnerability was determined in code-projects Medical Store Management System 1.0. Affected is an unknown function of the file ChangePassword.java. The manipulation of the argument newPassTxt leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

Affected Software

2 affected components

Code-projects Medical Store Management System

Fabian Medical Store Management System=1.0

Event History

Aug 14, 2025

CVE Published

via MITRE·02:32 AM

Data Sourced

via MITRE·02:32 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·03:15 AM

DescriptionSeverityWeaknessAffected Software

Jun 15, 57923

Event

via FIRST·12:24 AM

Frequently Asked Questions

What is the severity of CVE-2025-8931?

CVE-2025-8931 is considered a high severity vulnerability due to the potential for remote SQL injection attacks.

How do I fix CVE-2025-8931?

To fix CVE-2025-8931, validate and sanitize inputs in the ChangePassword.java file to prevent SQL injection.

Who is affected by CVE-2025-8931?

CVE-2025-8931 affects users of the Medical Store Management System version 1.0.

Can CVE-2025-8931 be exploited remotely?

Yes, CVE-2025-8931 can be exploited remotely due to the nature of the SQL injection vulnerability.

What part of the code is vulnerable in CVE-2025-8931?

The vulnerability in CVE-2025-8931 is located in the function handling the newPassTxt argument in ChangePassword.java.