PT-2025-51133 · Itsourcecode · Online Petshop Management System
CVSS v3.1
9.8
Critical
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
itsourcecode Online Pet Shop Management System version 1.0
Description
A flaw exists in itsourcecode Online Pet Shop Management System version 1.0. The issue resides in unknown code within the
/pet1/addcnp.php file. Manipulation of the cnpname argument can lead to SQL injection. This attack can be initiated remotely, and an exploit has been publicly released.Recommendations
Update to a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict access to the
/pet1/addcnp.php file. Avoid using the cnpname parameter in the affected API endpoint until the issue is resolved.Exploit
Fix
SQL injection
Special Elements Injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Online Petshop Management System