CVE-2025-10836
published 2025-09-23CVE-2025-10836: A weakness has been identified in SourceCodester Pet Grooming Management Software 1.0. Affected is an unknown function of the file /admin/print1.php. Executing…
PriorityP348critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
EPSS
0.48%
41.0th percentile
A weakness has been identified in SourceCodester Pet Grooming Management Software 1.0. Affected is an unknown function of the file /admin/print1.php. Executing manipulation of the argument ID can lead to sql injection. The attack can be launched remotely. The exploit has been made available to the public and could be exploited.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| mayurik | pet_grooming_management_software | — | — |
| sourcecodester | pet_grooming_management_software | — | — |
CVSS provenance
nvdv3.19.8CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvdv4.05.5MEDIUMCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
nvdv2.07.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
SourceCodester Pet Grooming Management Software 1.0 /admin/print1.php id sql injection
vuldb·2026-10-12·CVSS 9.8
CVE-2025-10836 [CRITICAL] SourceCodester Pet Grooming Management Software 1.0 /admin/print1.php id sql injection
A vulnerability classified as critical was found in SourceCodester Pet Grooming Management Software 1.0. Affected is an unknown function of the file /admin/print1.php. Executing a manipulation of the argument ID can lead to sql injection.
This vulnerability is tracked as CVE-2025-10836. The attack can be launched remotely. Moreover, an exploit is present.
GHSA
GHSA-68r9-vv46-5754: A weakness has been identified in SourceCodester Pet Grooming Management Software 1
ghsa_unreviewed·2025-09-23
CVE-2025-10836 [MEDIUM] CWE-74 GHSA-68r9-vv46-5754: A weakness has been identified in SourceCodester Pet Grooming Management Software 1
A weakness has been identified in SourceCodester Pet Grooming Management Software 1.0. Affected is an unknown function of the file /admin/print1.php. Executing manipulation of the argument ID can lead to sql injection. The attack can be launched remotely. The exploit has been made available to the public and could be exploited.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2025-09-23
Published