Vulnerability Details CVE-2025-10688
                A vulnerability was determined in SourceCodester Pet Grooming Management Software 1.0. This vulnerability affects unknown code of the file /admin/operation/paid.php. This manipulation of the argument inv_no/insta_amt causes sql injection. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized.
                
                    Exploit prediction scoring system (EPSS) score
                    
                        
                            EPSS Score 0.0
                        
                    
                    
                        
                            EPSS Ranking 10.5%
                        
                    
                 
                
                    CVSS Severity
                    
                        
                            CVSS v3 Score 7.3
                        
                    
                    
                        
                            CVSS v2 Score 7.5
                        
                    
                 
                
                
                
                    
                
                
                    
                        Products affected by CVE-2025-10688
                        
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:a:mayurik:pet_grooming_management_software:1.0