ByteOS Network

NVD Vulnerability Details :

CVE-2025-9749

Received

Source-cna@vuldb.com

Published At-31 Aug, 2025 | 23:15

Updated At-31 Aug, 2025 | 23:15

A vulnerability was identified in HKritesh009 Grocery List Management Web App up to f491b681eb70d465f445c9a721415c965190f83b. This affects an unknown part of the file /src/update.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit is publicly available and might be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Secondary	4.0	6.9	MEDIUM	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Primary	3.1	7.3	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Secondary	2.0	7.5	HIGH	AV:N/AC:L/Au:N/C:P/I:P/A:P

Weaknesses

CWE ID	Type	Source
CWE-74	Primary	cna@vuldb.com
CWE-89	Primary	cna@vuldb.com

References

Hyperlink	Source	Resource
https://gist.github.com/0xSebin/a163239e0132d7d58ef1300f321da819	cna@vuldb.com	N/A
https://gist.github.com/0xSebin/a163239e0132d7d58ef1300f321da819#steps-to-reproduce	cna@vuldb.com	N/A
https://vuldb.com/?ctiid.322050	cna@vuldb.com	N/A
https://vuldb.com/?id.322050	cna@vuldb.com	N/A
https://vuldb.com/?submit.640488	cna@vuldb.com	N/A

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History