SourceCodester Pet Grooming Management Software vulnerabilities
7 known CVE vulnerabilities in SourceCodester Pet Grooming Management Software, translated and rated.
- CVE-2026-75014High
A flaw has been found in SourceCodester Pet Grooming Management Software 1.0. This vulnerability affects unknown code of the file /admin/get_barcode_data.php. This manipulation of the argument barcode causes sql injection. The attack may be initiated remotely. The exploit has been published and may be used.
- CVE-2026-10254Medium
A flaw has been found in SourceCodester Pet Grooming Management Software 1.0. Affected is an unknown function of the file /admin/. This manipulation causes file and directory information exposure. The attack can be initiated remotely. The exploit has been published and may be used.
- CVE-2025-11051Medium
A cross-site request forgery (CSRF) vulnerability has been found in SourceCodester Pet Grooming Management Software 1.0. The vulnerability affects unknown code and can be exploited remotely.
- CVE-2025-10840Medium
A SQL injection vulnerability was identified in SourceCodester Pet Grooming Management Software 1.0 in the file /admin/print-payment.php. Manipulation of the argument sql111 allows remote attack initiation. The exploit has been made public and could be exploited.
- CVE-2025-10839Medium
A SQL injection vulnerability was found in SourceCodester Pet Grooming Management Software 1.0 in the file /admin/inv-print.php. Manipulation of the argument ID allows remote attack. The exploit has been released to the public and may be exploited.
- CVE-2025-10835Medium
A security flaw was discovered in SourceCodester Pet Grooming Management Software 1.0. The file /admin/view_payorder.php is affected; manipulation of the ID argument results in SQL injection. The attack can be initiated remotely and the exploit has been released.
- CVE-2025-10828Medium
A vulnerability has been detected in SourceCodester Pet Grooming Management Software 1.0. It affects an unknown part of the file /admin/edit.php. Manipulation of the argument ID leads to SQL injection. The attack can be launched remotely. The exploit has been publicly disclosed and may be used.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

