Description
A security vulnerability has been detected in SourceCodester Pet Grooming Management Software 1.0. This affects an unknown function of the file /admin/edit_tax.php. The manipulation of the argument ID leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used.
Metrics
CVSS 3.1 9.8/10
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| SourceCodester | Pet Grooming Management Software | 1.0 |
References
- https://github.com/YunyiLiu31/sql-injection-vulnerabilityExploit, Third Party Advisory
- https://vuldb.com/?ctiid.325158Permissions Required
- https://vuldb.com/?id.325158Third Party Advisory, VDB Entry
- https://vuldb.com/?submit.654161Third Party Advisory, VDB Entry
- https://vuldb.com/?submit.655882Third Party Advisory, VDB Entry
- https://www.sourcecodester.com/Product
Timeline
- Published
- Sep 22, 2025
- Last modified
- Jun 17, 2026
- NVD status
- Analyzed