CVE-2026-7447

MediumCVSS 6.3

Published: 30/04/2026(UTC)Updated: 26/10/2026(UTC)Translated: 27/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.25%

16th percentile - higher than 16% of all known CVEs

Summary

A flaw has been found in SourceCodester Pet Grooming Management Software 1.0 in /admin/update_customer.php, where manipulation of the type/length/business parameters leads to SQL injection. The attack can be carried out remotely and the exploit has been published.

Risk Assessment

Unauthorized SQL queries could be executed, potentially leading to data leakage or modification.

Recommendation

Update the software to a patched version or implement input validation and parameterized queries.

Other vulnerabilities in Pet Grooming Management Software

CVE-2025-60318Medium
SourceCodester Pet Grooming Management Software 1.0 is vulnerable to Cross-Site Scripting (XSS) in /admin/profile.php via the fname (First Name) and lname (Last Name) fields.

Original NVD description (English source)

A flaw has been found in SourceCodester Pet Grooming Management Software 1.0. This vulnerability affects unknown code of the file /admin/update_customer.php. This manipulation of the argument type/length/business parameter validity causes sql injection. The attack is possible to be carried out remotely. The exploit has been published and may be used.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS