CVE-2025-10688: SourceCodester Pet Grooming Management Software paid.php sql injection
A vulnerability was determined in SourceCodester Pet Grooming Management Software 1.0. This vulnerability affects unknown code of the file /admin/operation/paid.php. This manipulation of the argument invno/instaamt causes sql injection. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-10688?
CVE-2025-10688 has a high severity as it allows for SQL injection vulnerabilities in the SourceCodester Pet Grooming Management Software.
How do I fix CVE-2025-10688?
To fix CVE-2025-10688, you should sanitize the input for the 'insta_amt' argument and implement prepared statements in your SQL queries.
What kind of attack can be executed through CVE-2025-10688?
CVE-2025-10688 allows for remote SQL injection attacks, enabling attackers to manipulate the database.
Which software versions are affected by CVE-2025-10688?
CVE-2025-10688 affects version 1.0 of SourceCodester Pet Grooming Management Software.
Is authentication required to exploit CVE-2025-10688?
No authentication is required to exploit the SQL injection vulnerability identified in CVE-2025-10688.