CVE-2025-10598: SourceCodester Pet Grooming Management Software search_product.php sql injection
A vulnerability was identified in SourceCodester Pet Grooming Management Software 1.0. This issue affects some unknown processing of the file /admin/searchproduct.php. Such manipulation of the argument groupid leads to sql injection. The attack may be launched remotely. The exploit is publicly available and might be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-10598?
CVE-2025-10598 is classified as a high severity vulnerability due to its potential for SQL injection.
How do I fix CVE-2025-10598?
To fix CVE-2025-10598, sanitize and validate all user inputs for the 'group_id' parameter in the search_product.php file.
What software is affected by CVE-2025-10598?
CVE-2025-10598 affects SourceCodester Pet Grooming Management Software version 1.0.
Can CVE-2025-10598 be exploited remotely?
Yes, CVE-2025-10598 can be exploited remotely by manipulating the 'group_id' parameter.
What type of vulnerability is CVE-2025-10598?
CVE-2025-10598 is an SQL injection vulnerability that allows unauthorized data access.