Sourcecodester · Pet Grooming Management · CVE-2026-7447
**Name of the Vulnerable Software and Affected Versions**
SourceCodester Pet Grooming Management Software version 1.0
**Description**
A flaw in the '/admin/update customer.php' endpoint allows for remote SQL injection. This occurs due to improper validation of the argument type, length, or business parameter validity, enabling an attacker to manipulate database queries.
**Recommendations**
Update SourceCodester Pet Grooming Management Software version 1.0 to a version that contains a fix for this issue.
As a temporary workaround, restrict access to the '/admin/update customer.php' file to minimize the risk of exploitation.