CVE-2025-10839HIGH 8.8EPSS p34.8%
CVE-2025-10839CVE-2025-10839
Description
A security flaw has been discovered in SourceCodester Pet Grooming Management Software 1.0. The impacted element is an unknown function of the file /admin/inv-print.php. The manipulation of the argument ID results in sql injection. It is possible to launch the attack remotely. The exploit has been released to the public and may be exploited.
Scoring
| CVSS 3.1 | 8.8 (HIGH) |
| Vector | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
| EPSS | 0.44% probability of exploitation · percentile 34.8% · 2026-06-19T12:03:05Z |
| Published | 2025-09-23 |
| Last modified | 2026-04-29 |
Underlying weaknesses· 2
References
- https://github.com/para-paradise/webray.com.cn/blob/main/Pet%20Grooming%20Management/SourceCodester%20Pet%20Grooming%20Management%20Software%20inv-print.php%20sql%20injection%20Vulnerability.md
- https://vuldb.com/?ctiid.325201
- https://vuldb.com/?id.325201
- https://vuldb.com/?submit.657156
- https://www.sourcecodester.com/
2
| Type | Target | Confidence | Tier |
|---|---|---|---|
| Weakness | Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')cwe-74 | 0% | live |
| Weakness | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')cwe-89 | 0% | live |
Related by meaning· 6
Nearest entities by semantic similarity across the cs-graph corpus.