CVE-2025-10429

Name of the Vulnerable Software and Affected Versions SourceCodester Pet Grooming Management Software version 1.0

Description A SQL injection issue exists in SourceCodester Pet Grooming Management Software. The vulnerability is located in an unknown functionality within the /admin/ajax product.php file. Manipulation of the drop services argument can trigger the injection. This attack can be initiated remotely. The exploit for this issue is publicly available.

Recommendations As a temporary workaround, consider restricting access to the /admin/ajax product.php file to minimize the risk of exploitation. Sanitize the drop services argument to prevent SQL injection attacks.