CVE-2025-10430

SourceCodester Pet Grooming Management Software barcode.php sql injection

State: Published
Severity: 5.3 Medium
Published: Sep 15, 2025
Updated: Sep 15, 2025
Reserved: Sep 14, 2025

Description

A flaw has been found in SourceCodester Pet Grooming Management Software 1.0. Affected by this issue is some unknown functionality of the file /admin/barcode.php. This manipulation of the argument ID causes sql injection. The attack may be initiated remotely. The exploit has been published and may be used.

Scores

CVSS	Score	Vector	Source
4.0	5.3 Medium	CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P	VulDB
3.1	6.3 Medium	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R	VulDB
3.0	6.3 Medium	CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R	VulDB
2.0	6.5 Medium	AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR	VulDB

Weaknesses

CWE-89 SQL Injection
CWE-74 Injection

Affected Products

Product	Versions
Pet Grooming Management SoftwareSourceCodester	1.0Affected

References

VDB-323864 | SourceCodester Pet Grooming Management Software barcode.php sql injectionvdb-entrytechnical-description
VDB-323864 | CTI Indicators (IOB, IOC, TTP, IOA)signaturepermissions-required
Submit #647488 | sourcecodester Pet grooming management software August 30, 2025 SQL Injectionthird-party-advisory
Submit #647622 | SourceCodester Pet grooming management V1.0 SQL Injection (Duplicate)third-party-advisory
https://github.com/joinia/webray.com.cn/blob/main/Pet-grooming-management-software/petgrooming-sql-barcode.mdexploit
https://www.sourcecodester.com/product

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.