Mayuri K Pet Grooming Management Software

SourceCodester Pet Grooming Management Software edit_tax.php sql injection

SourceCodester Pet Grooming Management Software print_inv.php sql injection

SourceCodester Pet Grooming Management Software print1.php sql injection

SourceCodester Pet Grooming Management Software fetch_product_details.php sql injection

SourceCodester Pet Grooming Management Software paid.php sql injection

SourceCodester Pet Grooming Management Software edit_role.php sql injection

SourceCodester Pet Grooming Management Software search_product.php sql injection

SourceCodester Pet Grooming Management Software 1.0 is vulnerable to SQL Injection in admin/view_customer.php via the ID parameter.

SourceCodester Pet Grooming Management Software print-payment.php sql injection

SourceCodester Pet Grooming Management Software inv-print.php sql injection

SourceCodester Pet Grooming Management Software profile.php unrestricted upload

SourceCodester Pet Grooming Management Software Setting seo_setting.php unrestricted upload

SourceCodester Pet Grooming Management Software user.php unrestricted upload

SourceCodester Pet Grooming Management Software barcode.php sql injection

SourceCodester Pet Grooming Management Software edit.php sql injection

SourceCodester Pet Grooming Management Software ajax_product.php sql injection

SourceCodester Pet Grooming Management Software view_payorder.php sql injection

SourceCodester Pet Grooming Management Software ajax_represent.php sql injection

SourceCodester Pet Grooming Management Software User Management user.php improper authorization

SourceCodester Pet Grooming Management Software manage_website.php unrestricted upload

A path traversal vulnerability was identified in SourceCodester Pet Grooming Management System 1.0, affecting the admin/manage_website.php component. An authenticated user with administrative privileges can leverage this flaw by submitting a specially crafted POST request, enabling the deletion of arbitrary files on the web server or underlying operating system.

SourceCodester Pet Management System profile.php unrestricted upload

SourceCodester Pet Grooming Management Software profit_report.php sql injection

SourceCodester Pet Grooming Management Software User Creation add_user.php improper authorization

SourceCodester Pet Grooming Management Software Financial Report improper authorization

SourceCodester Pet Grooming Management Software cross-site request forgery

The change password functionality at /pet_grooming/admin/change_pass.php in SourceCodester Pet Grooming Management Software 1.0 is vulnerable to Cross-Site Request Forgery (CSRF) attacks. The application does not implement adequate anti-CSRF tokens or same-site cookie restrictions, allowing attackers to trick authenticated users into unknowingly changing their passwords.

SourceCodester Pet Grooming Management Software 1.0 is vulnerable to Cross Site Scripting (XSS) in /admin/profile.php via the fname (First Name) and lname (Last Name) fields.

SourceCodester Pet Grooming Management Software 1.0 is vulnerable to Cross Site Scripting (XSS) via the Customer Name field under Customer Management Section.