exploitDog

CVE-2025-63298

Опубликовано: 30 окт. 2025

Источник: nvd

CVSS3: 8.2

EPSS Низкий

Описание

A path traversal vulnerability was identified in SourceCodester Pet Grooming Management System 1.0, affecting the admin/manage_website.php component. An authenticated user with administrative privileges can leverage this flaw by submitting a specially crafted POST request, enabling the deletion of arbitrary files on the web server or underlying operating system.

Ссылки

https://github.com/z3rObyte/CVE-2025-63298
Exploit
Third Party Advisory
https://www.sourcecodester.com/sites/default/files/download/mayuri_k/petgrooming_erp.zip
Product

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:mayurik:pet_grooming_management_software:1.0:*:*:*:*:*:*:*

EPSS

Процентиль: 30%

0.00112

Низкий

8.2 High

CVSS3

Дефекты

CWE-24

Связанные уязвимости

GHSA-h693-9mj7-pcj4

CVSS3: 8.2

github

3 месяца назад

A path traversal vulnerability was identified in SourceCodester Pet Grooming Management System 1.0, affecting the admin/manage_website.php component. An authenticated user with administrative privileges can leverage this flaw by submitting a specially crafted POST request, enabling the deletion of arbitrary files on the web server or underlying operating system.

EPSS

Процентиль: 30%

0.00112

Низкий

8.2 High

CVSS3

Дефекты

CWE-24