VYPR

Security Advisories

by TREXNEGRO

Source repositories

CVEs (2)

  • CVE-2025-65135CriApr 14, 2026
    risk 0.64cvss 9.8epss 0.00

    In manikandan580 School-management-system 1.0, a time-based blind SQL injection vulnerability exists in /studentms/admin/between-date-reprtsdetails.php through the fromdate POST parameter.

  • CVE-2025-63939CriApr 14, 2026
    risk 0.64cvss 9.8epss 0.00

    Improper input handling in /Grocery/search_products_itname.php, in anirudhkannan Grocery Store Management System 1.0, allows SQL injection via the sitem_name POST parameter.