PT-2025-37456 · Sourcecodester · Pet Grooming Management

Joinia · Published 2025-09-15 · Updated 2025-09-18 · CVE-2025-10431

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SourceCodester Pet Grooming Management Software version 1.0

Description A SQL injection issue exists in SourceCodester Pet Grooming Management Software. The issue affects an unknown part of the /admin/ajax represent.php file. Manipulation of the ID argument can lead to SQL injection, allowing remote attackers to potentially access or alter data. The exploit has been publicly disclosed.

Recommendations Restrict access to the /admin/ajax represent.php file. Consider deploying a Web Application Firewall (WAF) to filter malicious requests.

Exploit

Fix

Special Elements Injection

SQL injection

Weakness Enumeration

CWE-74

CWE-89

Related Identifiers

CVE-2025-10431

Affected Products

Pet Grooming Management

References · 14

• 🔥 https://github.com/joinia/webray.com.cn/blob/main/Pet-grooming-management-software/petgrooming-sql-ajaxrepresent.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-10431 · Security Note
• https://osv.dev/vulnerability/CVE-2025-10431 · Vendor Advisory
• https://vuldb.com/?id.323865 · Note
• https://twitter.com/offseq/status/1967491344097583214 · Twitter Post
• https://t.me/CVEtracker/32488 · Telegram Post
• https://vuldb.com/?ctiid.323865 · Note
• https://t.me/cveNotify/135863 · Telegram Post
• https://twitter.com/CVEnew/status/1967491595793567964 · Twitter Post
• https://t.me/cveNotify/135442 · Telegram Post
• https://sourcecodester.com · Note
• https://twitter.com/VulmonFeeds/status/1967494678728585565 · Twitter Post
• https://t.me/cveNotify/135871 · Telegram Post
• https://vuldb.com/?submit.647493 · Note