CVE-2025-10688

A vulnerability was determined in SourceCodester Pet Grooming Management Software 1.0. This vulnerability affects unknown code of the file /admin/operation/paid.php. This manipulation of the argument invno/instaamt causes sql injection. The attack can be initiated remotely. The exploit has been...

CVE-2025-10688

SourceCodester Pet Grooming Management Software v1.0 contains a SQL injection vulnerability in /admin/operation/paid.php, triggered by manipulating the insta_amt parameter (and possibly inv_no). The flaw allows remote exploitation, and public exploitation information exists. Affected component is...