PT-2026-36031 · Sourcecodester · Pet Grooming Management

Xiaozhi · Published 2026-04-30 · Updated 2026-04-30 · CVE-2026-7447

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions SourceCodester Pet Grooming Management Software version 1.0

Description A flaw in the '/admin/update customer.php' endpoint allows for remote SQL injection. This occurs due to improper validation of the argument type, length, or business parameter validity, enabling an attacker to manipulate database queries.

Recommendations Update SourceCodester Pet Grooming Management Software version 1.0 to a version that contains a fix for this issue. As a temporary workaround, restrict access to the '/admin/update customer.php' file to minimize the risk of exploitation.

Exploit

Fix

Special Elements Injection

SQL injection

Weakness Enumeration

CWE-74

CWE-89

Related Identifiers

CVE-2026-7447

Affected Products

Pet Grooming Management

References · 8

• 🔥 https://github.com/zhi-cyber/cve/issues/1 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-7447 · Security Note
• https://twitter.com/infoflowcloud/status/2049874195211792891 · Twitter Post
• https://vuldb.com/vuln/360188 · Note
• https://vuldb.com/vuln/360188/cti · Note
• https://sourcecodester.com · Note
• https://twitter.com/CVEnew/status/2049872433776111724 · Twitter Post
• https://vuldb.com/submit/804209 · Note