CVE-2025-10835: SourceCodester Pet Grooming Management Software view_payorder.php sql injection
A security flaw has been discovered in SourceCodester Pet Grooming Management Software 1.0. This impacts an unknown function of the file /admin/viewpayorder.php. Performing manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The exploit has been released to the public and may be exploited.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-10835?
CVE-2025-10835 is classified as a critical vulnerability due to its potential for remote SQL injection attacks.
How do I fix CVE-2025-10835?
To fix CVE-2025-10835, you should implement parameterized queries or prepared statements in the /admin/view_payorder.php file to prevent SQL injection.
What type of attack is possible with CVE-2025-10835?
CVE-2025-10835 allows for remote SQL injection attacks by manipulating the ID argument within the affected file.
Which software is affected by CVE-2025-10835?
CVE-2025-10835 affects SourceCodester Pet Grooming Management Software version 1.0.
Can CVE-2025-10835 be exploited remotely?
Yes, CVE-2025-10835 can be exploited remotely, allowing attackers to perform SQL injection from anywhere.