Xiaoliyu

**Name of the Vulnerable Software and Affected Versions** DataTables versions up to 1.10.13 **Description** A flaw exists in DataTables that allows for path traversal. The issue is related to the manipulation of the `src` argument within an unknown function of the `/examples/resources/examples.php` file. This manipulation can be initiated remotely. The exploit has been published. **Recommendations** Upgrade to version 1.10.15 or later.

**Name of the Vulnerable Software and Affected Versions** SourceCodester Pet Grooming Management Software version 1.0 **Description** A SQL injection issue exists in SourceCodester Pet Grooming Management Software version 1.0. The issue is located in the file `/admin/fetch product details.php`. Manipulation of the `barcode` argument can lead to SQL injection. The exploit has been made public and could be used remotely. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** SourceCodester Pet Grooming Management Software version 1.0 **Description** A security flaw exists in SourceCodester Pet Grooming Management Software version 1.0. Manipulation of the `ID` argument in the file `/admin/view payorder.php` can lead to SQL injection. The attack can be initiated remotely. The exploit has been released publicly. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** SourceCodester Pet Grooming Management Software version 1.0 **Description** A flaw exists in SourceCodester Pet Grooming Management Software that allows for remote SQL injection. This occurs through manipulation of the `ID` argument within an unknown function of the `/admin/print1.php` file. The exploit for this issue has been publicly released. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** SourceCodester Pet Grooming Management Software version 1.0 **Description** A flaw exists in SourceCodester Pet Grooming Management Software that allows for SQL injection. This occurs through manipulation of the `sql111` argument in the file '/admin/print-payment.php'. The attack can be initiated remotely. The exploit has been made publicly available. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.