PT-2025-36438 · Sourcecodester · Pet Grooming Management

111Ctx · Published 2025-09-08 · Updated 2025-09-08 · CVE-2025-10085

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SourceCodester Pet Grooming Management Software version 1.0

Description A security flaw has been discovered that allows for unrestricted file upload through manipulation of unknown code within the manage website.php file. This issue is remotely exploitable and the exploit has been publicly released.

Recommendations As a temporary workaround, restrict access to the manage website.php file to minimize the risk of exploitation.

Exploit

Fix

Improper Access Control

Unrestricted File Upload

Weakness Enumeration

CWE-284

CWE-434

Related Identifiers

CVE-2025-10085

Affected Products

Pet Grooming Management

References · 12

• 🔥 https://github.com/chen2496088236/CVE/issues/9 · Exploit
• https://osv.dev/vulnerability/CVE-2025-10085 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-10085 · Security Note
• https://vuldb.com/?submit.644660 · Note
• https://twitter.com/VulmonFeeds/status/1964944286601884134 · Twitter Post
• https://vuldb.com/?id.323041 · Note
• https://sourcecodester.com · Note
• https://twitter.com/CVEnew/status/1964929489562980693 · Twitter Post
• https://vuldb.com/?ctiid.323041 · Note
• https://twitter.com/RedPacketSec/status/1965203327693602890 · Twitter Post
• https://t.me/cveNotify/134592 · Telegram Post
• https://t.me/CVEtracker/31935 · Telegram Post