CVE-2025-10081

CVE-2025-10081 affects SourceCodester Pet Management System v1.0. The flaw is in /admin/profile.php, where manipulating the website_image argument enables unrestricted file upload, with remote exploitation possible. The vulnerability is corroborated by multiple sources; an exploit has been publis...

CVE-2026-1702

CVE-2026-1702 affects SourceCodester Pet Grooming Management Software 1.0, specifically the User Management component in the file /admin/operation/user.php. The vulnerability arises from improper authorization due to manipulation of the group_id argument, enabling a remote attacker to exploit it....

CVE-2025-10083

SourceCodester Pet Grooming Management Software 1.0 contains an unrestricted file upload vulnerability in the /admin/profile.php endpoint. Exploitation is possible remotely and can lead to arbitrary file upload, with potential impact on confidentiality, integrity, and availability as indicated by...

CVE-2025-10832

A vulnerability in SourceCodester Pet Grooming Management Software 1.0 affects the file /admin/fetch_product_details.php where manipulation of the barcode argument causes SQL injection. Exploitation can be performed remotely, and public PoCs exist. CVSS data across sources indicate high to critic...

CVE-2025-10427

SourceCodester Pet Grooming Management Software 1.0 is affected. The vulnerability lies in the file /admin/operation/user.php where manipulating the website_image argument enables unrestricted file uploads, potentially allowing remote and unauthenticated or low-privilege attackers to upload arbit...

CVE-2025-10598

SourceCodester Pet Grooming Management Software 1.0 is affected by a SQL injection in /admin/search_product.php caused by improper handling of the group_id parameter. This vulnerability can be exploited remotely and has publicly available exploit code. Some connected advisories mention a practica...

CVE-2025-10431

CVE-2025-10431 concerns SourceCodester Pet Grooming Management Software 1.0. The vulnerability is a SQL injection in an unknown part of the file /admin/ajax_represent.php caused by manipulating the ID parameter, reported as exploitable remotely with the exploit disclosed. Connected sources consis...

CVE-2025-10396

CVE-2025-10396 affects SourceCodester Pet Grooming Management Software 1.0. The vulnerability is a SQL injection in the /admin/edit_role.php endpoint triggered by manipulating the ID parameter, reported as exploitable remotely. Public disclosures indicate an active attack surface. Attacker-contro...

CVE-2025-11057

CVE-2025-11057 affects SourceCodester Pet Grooming Management Software 1.0. The vulnerability is a SQL injection in the admin helper that processes the ID parameter in the file /admin/print_inv.php. Manipulation of ID can be exploited remotely, and multiple sources note that the exploit has been ...

CVE-2025-60318

CVE-2025-60318 affects SourceCodester Pet Grooming Management Software 1.0. The vulnerability is a Cross‑Site Scripting (XSS) flaw in /admin/profile.php exploitable via fname and lname fields, as confirmed across multiple feeds (NVD/Red Hat/CNNVD). Underlying issue: insufficient input validation/...

CVE-2025-10828

CVE-2025-10828 concerns a SQL injection in SourceCodester Pet Grooming Management Software 1.0, triggered by manipulation of the ID parameter in the file /admin/edit.php. This leads to remote exploitation and is supported by multiple feeds (NVD and partner reports) with a high severity (NVD base ...

CVE-2025-10836

The CVE-2025-10836 entry concerns SourceCodester Pet Grooming Management Software 1.0, where the vulnerability is in an unknown function of the file /admin/print1.php. Exploitation arises from manipulating the ID parameter, enabling SQL injection that can be triggered remotely. The issue has publ...

CVE-2025-10429

CVE-2025-10429 affects SourceCodester Pet Grooming Management Software 1.0. The vulnerability is a SQL injection in the unknown functionality of the file /admin/ajax_product.php, triggered by manipulating the drop_services argument. It can be exploited remotely and publicly disclosed. Affected pr...

CVE-2026-3737

SourceCodester Pet Grooming Management Software 1.0 is affected. The vulnerability concerns the add_user.php file in the User Creation Handler, where manipulation can lead to improper authorization. Exploitation can be performed remotely, and public exploitation details exist. No remediation deta...

CVE-2025-10428

CVE-2025-10428 affects SourceCodester Pet Grooming Management Software 1.0, specifically the Setting Handler component. The vulnerability is in the file /admin/seo_setting.php where manipulation of the argument website_image enables an unrestricted file upload. This is a remote, unauthenticated-s...

CVE-2026-3738

SourceCodester Pet Grooming Management Software 1.0 is affected, specifically the Financial Report Page component. The Red Hat, NVD and PT- Security entries converge on a flaw that enables improper/unauthenticated remote authorization bypass. Exploitation is publicly available, enabling remote ex...

CVE-2025-10087

SourceCodester Pet Grooming Management Software 1.0 is affected by a SQL injection in /admin/profit_report.php via the product_id parameter. The vulnerability is exploitable remotely and can be triggered without user interaction, with the exploit publicly disclosed. Root cause: improper handling ...

CVE-2025-10839

CVE-2025-10839 affects SourceCodester Pet Grooming Management Software 1.0. The vulnerability is a SQL injection in the /admin/inv-print.php script caused by manipulating the ID parameter. It allows remote exploitation, and public exploits exist. Multiple connected sources corroborate the issue a...

CVE-2025-11051

CVE-2025-11051 affects SourceCodester Pet Grooming Management Software v1.0 with a cross-site request forgery flaw. The PT-2025-39712 entry confirms the vulnerable software version and that the issue can be exploited remotely, but the precise vulnerable code path/root cause is not specified in th...

CVE-2025-10688

SourceCodester Pet Grooming Management Software v1.0 contains a SQL injection vulnerability in /admin/operation/paid.php, triggered by manipulating the insta_amt parameter (and possibly inv_no). The flaw allows remote exploitation, and public exploitation information exists. Affected component is...

CVE-2025-10840

CVE-2025-10840 affects SourceCodester Pet Grooming Management Software 1.0. The vulnerability is a SQL injection in the file /admin/print-payment.php via manipulation of the sql111 argument, enabling remote exploitation. Public exploits exist. Multiple sources report impact across confidentiality...

CVE-2025-10085

CVE-2025-10085 affects SourceCodester Pet Grooming Management Software 1.0. A vulnerability in the file manage_website.php allows unrestricted file upload due to manipulation of unknown code, enabling a remotely exploitable attack. Multiple sources note that the exploit is publicly available and ...

CVE-2025-10430

SourceCodester Pet Grooming Management Software 1.0 contains a SQL injection in the /admin/barcode.php file caused by manipulation of the ID parameter. The vulnerability can be triggered remotely; exploits have been published. Multiple sources (NVD, Red Hat, CVE lists, PT Security) describe the a...

CVE-2025-10835

SourceCodester Pet Grooming Management Software 1.0 is affected by a SQL injection in /admin/view_payorder.php caused by manipulating the ID parameter. The issue is reachable remotely and an exploit has been publicly released. The CVE entry and allied reports describe the root cause as improper h...

CVE-2025-60316

CVE-2025-60316 affects SourceCodester Pet Grooming Management Software 1.0. The vulnerability is an SQL injection in the admin/view_customer.php script via the ID parameter, caused by improper handling of input. Impact includes potential unauthorized data access or modification. Public documents ...

CVE-2025-10801

CVE-2025-10801 affects SourceCodester Pet Grooming Management Software 1.0. The vulnerability is a SQL injection in the file /admin/edit_tax.php triggered by manipulating the ID argument. It is remotely exploitable and has publicly disclosed exploit information. Multiple connected sources (NVD, R...

CVE-2025-63298

SourceCodester Pet Grooming Management System 1.0 contains a path traversal vulnerability in admin/manage_website.php. An authenticated user with administrative privileges can exploit a crafted POST request to delete arbitrary files on the web server or underlying operating system. The vulnerabil...

CVE-2025-61087

SourceCodester Pet Grooming Management Software 1.0 is vulnerable to Cross Site Scripting (XSS) via the Customer Name field in the Customer Management section. The root cause is unverified input in that field. Documented impact indicates limited confidentiality/integrity impact and no availabilit...

CVE-2025-63717

Summary: CSRF in SourceCodester Pet Grooming Management Software 1.0. The change password functionality at /pet_grooming/admin/change_pass.php is vulnerable due to missing anti-CSRF tokens and same-site cookie protections, potentially allowing attackers to trick authenticated users into changing ...