CVE-2025-10427 MEDIUM

CVE-2025-10427: SourceCodester Pet Grooming Management Software user.php unrestricted upload

Vendor Sourcecodester

Product Pet Grooming Management Software

Weakness CWE-434 · Unrestricted file upload

Published September 15, 2025

Last update September 15, 2025

View on NVD All CVEs

CVSS base score

5.3/10

Attack vector Network

Attack complexity Low

Privileges required Low

User interaction None

Confidentiality —

Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

What the vulnerability does

01Description

A weakness has been identified in SourceCodester Pet Grooming Management Software 1.0. This impacts an unknown function of the file /admin/operation/user.php. Executing manipulation of the argument website_image can lead to unrestricted upload. It is possible to launch the attack remotely. The exploit has been made available to the public and could be exploited.

Key dates

02Disclosure timeline

September 15, 2025 CVE published

September 15, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2025-10427 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/434.html