CVE-2025-8928 | code-projects Medical Store Management System 1.0 Update Medicines Page UpdateMedicines.java productNameTxt sql injection

A vulnerability classified as critical has been found in code-projects Medical Store Management System 1.0. This affects an unknown part of the file UpdateMedicines.java of the component Update Medicines Page. The manipulation of the argument productNameTxt leads to sql injection.

This vulnerability is uniquely identified as CVE-2025-8928. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.