Hkritesh009 · Grocery List Management Web App · CVE-2025-9749
**Name of the Vulnerable Software and Affected Versions**
HKritesh009 Grocery List Management Web App (affected versions not specified)
**Description**
A SQL injection issue exists in the `/src/update.php` file. Manipulation of the `ID` argument can trigger the issue, allowing for remote exploitation. The exploit is publicly available.
**Recommendations**
At the moment, there is no information about a newer version that contains a fix for this vulnerability.