Lucene search
+L

138 matches found

CNNVD
CNNVD
•added 2026/03/08 12:00 a.m.•22 views

SourceCodester Pet Grooming Management Software 授权问题漏洞

SourceCodester Pet Grooming Management Software is an open-source pet grooming management system developed by SourceCodester. Version 1.0 of SourceCodester Pet Grooming Management Software has a licensing issue vulnerability. This vulnerability stems from operations on the financial reporting pag...

6.5CVSS6.6AI score0.00403EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2026/03/08 12:00 a.m.•30 views

SourceCodester Pet Grooming Management Software 授权问题漏洞

SourceCodester Pet Grooming Management Software is an open-source pet grooming management system developed by SourceCodester. Version 1.0 of SourceCodester Pet Grooming Management Software has a vulnerability related to authorization issues. This vulnerability stems from the operation of the user...

6.5CVSS6.6AI score0.00403EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/08 12:00 a.m.•7 views

CVE-2026-3737: Improper Authorization

A vulnerability was determined in SourceCodester Pet Grooming Management Software 1.0. This affects an unknown part of the file adduser.php of the component User Creation Handler. Executing a manipulation can lead to improper authorization. The attack may be launched remotely. The exploit has bee...

6.5CVSS6.2AI score0.00403EPSS
SaveExploits1References1
OSV
OSV
•added 2026/01/30 6:15 p.m.•16 views

CVE-2026-1702

A vulnerability was detected in SourceCodester Pet Grooming Management Software 1.0. Impacted is an unknown function of the file /admin/operation/user.php of the component User Management. Performing a manipulation of the argument groupid results in improper authorization. The attack can be...

8.8CVSS5.6AI score0.00403EPSS
SaveExploits1References5
CVE
CVE
•added 2026/01/30 5:32 p.m.•54 views

CVE-2026-1702

CVE-2026-1702 affects SourceCodester Pet Grooming Management Software 1.0, specifically the User Management component in the file /admin/operation/user.php. The vulnerability arises from improper authorization due to manipulation of the group_id argument, enabling a remote attacker to exploit it....

8.8CVSS6.3AI score0.00403EPSS
SaveExploits1References5Affected Software1
CNNVD
CNNVD
•added 2026/01/30 12:00 a.m.•22 views

SourceCodester Pet Grooming Management Software Authorization Issues Vulnerabilities

SourceCodester Pet Grooming Management Software is an open-source pet grooming management system developed by SourceCodester. Version 1.0 of SourceCodester Pet Grooming Management Software has a licensing issue vulnerability. This vulnerability stems from incorrect handling of the groupid paramet...

8.8CVSS6.6AI score0.00403EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/30 12:00 a.m.•3 views

CVE-2026-1702: Improper Authorization

A vulnerability was detected in SourceCodester Pet Grooming Management Software 1.0. Impacted is an unknown function of the file /admin/operation/user.php of the component User Management. Performing a manipulation of the argument groupid results in improper authorization. The attack can be...

8.8CVSS6.4AI score0.00403EPSS
SaveExploits1References1
NVD
NVD
•added 2025/11/07 7:16 p.m.•16 views

CVE-2025-63717

The change password functionality at /petgrooming/admin/changepass.php in SourceCodester Pet Grooming Management Software 1.0 is vulnerable to Cross-Site Request Forgery CSRF attacks. The application does not implement adequate anti-CSRF tokens or same-site cookie restrictions, allowing attackers...

6.5CVSS0.00158EPSS
SaveExploits1References2
CVE
CVE
•added 2025/11/07 12:00 a.m.•34 views

CVE-2025-63717

SourceCodester Pet Grooming Management Software version 1.0 is vulnerable to a Cross-Site Request Forgery (CSRF) attack due to a lack of adequate anti-CSRF tokens or same-site cookie restrictions. The vulnerability exists in the change password functionality at the /pet_grooming/admin/change_pass...

6.5CVSS5.8AI score0.00158EPSS
SaveExploits1References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/07 12:00 a.m.•6 views

CVE-2025-63717: Cross-Site Request Forgery (CSRF)

The change password functionality at /petgrooming/admin/changepass.php in SourceCodester Pet Grooming Management Software 1.0 is vulnerable to Cross-Site Request Forgery CSRF attacks. The application does not implement adequate anti-CSRF tokens or same-site cookie restrictions, allowing attackers...

6.5CVSS5.8AI score0.00158EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/11/07 12:00 a.m.•14 views

SourceCodester Pet Grooming Management Software 安全漏洞

SourceCodester Pet Grooming Management Software is an open source pet grooming management system from SourceCodester. A security vulnerability exists in SourceCodester Pet Grooming Management Software version 1.0, which stems from not implementing sufficient anti-CSRF tokens or same-site cookie...

6.5CVSS6.7AI score0.00158EPSS
SaveExploits1References2
CVE
CVE
•added 2025/10/30 12:00 a.m.•40 views

CVE-2025-63298

A path traversal vulnerability exists in SourceCodester Pet Grooming Management System 1.0 within the admin/manage_website.php component. An authenticated user with administrative privileges can exploit this flaw by submitting a specially crafted POST request—specifically using the old_login_imag...

8.2CVSS5.9AI score0.00519EPSS
SaveExploits1References2Affected Software1
Positive Technologies
Positive Technologies
•added 2025/10/30 12:00 a.m.•17 views

PT-2025-44449

Name of the Vulnerable Software and Affected Versions SourceCodester Pet Grooming Management System version 1.0 Description A path traversal flaw exists in the admin/manage website.php component of the software. An authenticated user possessing administrative privileges can exploit this issue by...

8.2CVSS6.7AI score0.00519EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/30 12:00 a.m.•4 views

CVE-2025-63298: Path Traversal: '../filedir'

A path traversal vulnerability was identified in SourceCodester Pet Grooming Management System 1.0, affecting the admin/managewebsite.php component. An authenticated user with administrative privileges can leverage this flaw by submitting a specially crafted POST request, enabling the deletion of...

8.2CVSS5.9AI score0.00519EPSS
SaveExploits1References1
EUVD
EUVD
•added 2025/10/09 9:31 p.m.•14 views

EUVD-2025-33582

SourceCodester Pet Grooming Management Software 1.0 is vulnerable to SQL Injection in admin/viewcustomer.php via the ID parameter...

7.5AI score0.00381EPSS
SaveExploits1References3
OSV
OSV
•added 2025/10/09 8:15 p.m.•15 views

CVE-2025-60316

SourceCodester Pet Grooming Management Software 1.0 is vulnerable to SQL Injection in admin/viewcustomer.php via the ID parameter...

9.4CVSS5.8AI score0.00381EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2025/10/09 12:00 a.m.•17 views

SourceCodester Pet Grooming Management Software 安全漏洞

SourceCodester Pet Grooming Management Software is an open source pet grooming management system from SourceCodester. A security vulnerability exists in SourceCodester Pet Grooming Management Software version 1.0, which originates from improper handling of the parameter ID in the...

9.4CVSS7.7AI score0.00381EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/09 12:00 a.m.•5 views

CVE-2025-60316: Improper Neutralization of Special Elements used in an SQL Command

SourceCodester Pet Grooming Management Software 1.0 is vulnerable to SQL Injection in admin/viewcustomer.php via the ID parameter...

9.4CVSS5.8AI score0.00381EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/10/09 12:00 a.m.•22 views

PT-2025-41459

Name of the Vulnerable Software and Affected Versions SourceCodester Pet Grooming Management Software version 1.0 Description The software is susceptible to SQL Injection in the 'admin/view customer.php' file through the ID parameter. This allows for potential unauthorized access or modification ...

9.4CVSS5.8AI score0.00381EPSS
SaveExploits1References7
Cvelist
Cvelist
•added 2025/10/08 12:00 a.m.•35 views

CVE-2025-60318

SourceCodester Pet Grooming Management Software 1.0 is vulnerable to Cross Site Scripting XSS in /admin/profile.php via the fname First Name and lname Last Name fields...

0.00241EPSS
SaveExploits1References2
Rows per page
Query Builder