104 matches found
SourceCodester Pet Grooming Management Software 安全漏洞
SourceCodester Pet Grooming Management Software is an open source pet grooming management system from SourceCodester. A security vulnerability exists in SourceCodester Pet Grooming Management Software version 1.0, which stems from not implementing sufficient anti-CSRF tokens or same-site cookie...
CVE-2025-63717
Summary: CSRF in SourceCodester Pet Grooming Management Software 1.0. The change password functionality at /pet_grooming/admin/change_pass.php is vulnerable due to missing anti-CSRF tokens and same-site cookie protections, potentially allowing attackers to trick authenticated users into changing ...
CVE-2025-63298
SourceCodester Pet Grooming Management System 1.0 contains a path traversal vulnerability in admin/manage_website.php. An authenticated user with administrative privileges can exploit a crafted POST request to delete arbitrary files on the web server or underlying operating system. The vulnerabil...
PT-2025-44449
Name of the Vulnerable Software and Affected Versions SourceCodester Pet Grooming Management System version 1.0 Description A path traversal flaw exists in the admin/manage website.php component of the software. An authenticated user possessing administrative privileges can exploit this issue by...
EUVD-2025-33582
SourceCodester Pet Grooming Management Software 1.0 is vulnerable to SQL Injection in admin/viewcustomer.php via the ID parameter...
CVE-2025-60316
SourceCodester Pet Grooming Management Software 1.0 is vulnerable to SQL Injection in admin/viewcustomer.php via the ID parameter...
PT-2025-41459
Name of the Vulnerable Software and Affected Versions SourceCodester Pet Grooming Management Software version 1.0 Description The software is susceptible to SQL Injection in the 'admin/view customer.php' file through the ID parameter. This allows for potential unauthorized access or modification ...
SourceCodester Pet Grooming Management Software 安全漏洞
SourceCodester Pet Grooming Management Software is an open source pet grooming management system from SourceCodester. A security vulnerability exists in SourceCodester Pet Grooming Management Software version 1.0, which originates from improper handling of the parameter ID in the...
CVE-2025-60318
CVE-2025-60318 affects SourceCodester Pet Grooming Management Software 1.0. The vulnerability is a Cross‑Site Scripting (XSS) flaw in /admin/profile.php exploitable via fname and lname fields, as confirmed across multiple feeds (NVD/Red Hat/CNNVD). Underlying issue: insufficient input validation/...
CVE-2025-60318
SourceCodester Pet Grooming Management Software 1.0 is vulnerable to Cross Site Scripting XSS in /admin/profile.php via the fname First Name and lname Last Name fields...
EUVD-2025-27109
Malicious code in bioql PyPI...
EUVD-2025-27112
Malicious code in bioql PyPI...
EUVD-2025-30201
Malicious code in bioql PyPI...
EUVD-2025-27117
Malicious code in bioql PyPI...
EUVD-2025-29742
Malicious code in bioql PyPI...
EUVD-2025-29151
Malicious code in bioql PyPI...
SourceCodester Pet Grooming Management Software 跨站脚本漏洞
SourceCodester Pet Grooming Management Software is an open source pet grooming management system from SourceCodester. A cross-site scripting vulnerability exists in SourceCodester Pet Grooming Management Software version 1.0, which stems from unverified input in the customer name field of the...
CVE-2025-11057
A vulnerability has been found in SourceCodester Pet Grooming Management Software 1.0. Affected by this issue is some unknown functionality of the file /admin/printinv.php. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit has been...
CVE-2025-11051
A vulnerability has been found in SourceCodester Pet Grooming Management Software 1.0. This vulnerability affects unknown code. The manipulation leads to cross-site request forgery. The attack is possible to be carried out remotely...
CVE-2025-11051
A vulnerability has been found in SourceCodester Pet Grooming Management Software 1.0. This vulnerability affects unknown code. The manipulation leads to cross-site request forgery. The attack is possible to be carried out remotely...