CVE-2025-10840: SourceCodester Pet Grooming Management Software print-payment.php sql injection
A weakness has been identified in SourceCodester Pet Grooming Management Software 1.0. This affects an unknown function of the file /admin/print-payment.php. This manipulation of the argument sql111 causes sql injection. The attack can be initiated remotely. The exploit has been made available to the public and could be exploited.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-10840?
CVE-2025-10840 is considered a critical vulnerability due to its potential for SQL injection enabling malicious remote attacks.
How do I fix CVE-2025-10840?
To fix CVE-2025-10840, ensure that input validation and parameterized queries are implemented for all database interactions in the affected script /admin/print-payment.php.
What software is affected by CVE-2025-10840?
CVE-2025-10840 affects SourceCodester Pet Grooming Management Software version 1.0.
What type of attack can CVE-2025-10840 lead to?
CVE-2025-10840 can lead to remote SQL injection attacks which may compromise the database.
Can CVE-2025-10840 be exploited remotely?
Yes, CVE-2025-10840 can be exploited remotely, allowing attackers to execute arbitrary SQL commands.