Mayurik vulnerabilities, page 4

284 vulnerabilities

Known vulnerabilities in Mayurik products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 32 products.

8.8HighCVE-2025-10428mayurik · pet_grooming_management_software +1 moreSourceCodester Pet Grooming Management Software Setting seo_setting.php unrestricted uploadA security vulnerability has been detected in SourceCodester Pet Grooming Management Software 1.0. Affected is an unknown function of the file /admin/seo_setting.php of the component Setting Handler. The manipulation of the argument website_image leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used.EPSS0.42%8.8HighCVE-2025-10839mayurik · pet_grooming_management_software +1 moreSourceCodester Pet Grooming Management Software inv-print.php sql injectionA security flaw has been discovered in SourceCodester Pet Grooming Management Software 1.0. The impacted element is an unknown function of the file /admin/inv-print.php. The manipulation of the argument ID results in sql injection. It is possible to launch the attack remotely. The exploit has been released to the public and may be exploited.EPSS0.49%7.2HighCVE-2025-10081mayurik · pet_grooming_management_software +1 moreSourceCodester Pet Management System profile.php unrestricted uploadA flaw has been found in SourceCodester Pet Management System 1.0. This impacts an unknown function of the file /admin/profile.php. This manipulation of the argument website_image causes unrestricted upload. Remote exploitation of the attack is possible. The exploit has been published and may be used.EPSS0.46%8.8HighCVE-2025-10430mayurik · pet_grooming_management_software +1 moreSourceCodester Pet Grooming Management Software barcode.php sql injectionA flaw has been found in SourceCodester Pet Grooming Management Software 1.0. Affected by this issue is some unknown functionality of the file /admin/barcode.php. This manipulation of the argument ID causes sql injection. The attack may be initiated remotely. The exploit has been published and may be used.EPSS0.39%8.8HighCVE-2025-10835mayurik · pet_grooming_management_software +1 moreSourceCodester Pet Grooming Management Software view_payorder.php sql injectionA security flaw has been discovered in SourceCodester Pet Grooming Management Software 1.0. This impacts an unknown function of the file /admin/view_payorder.php. Performing manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The exploit has been released to the public and may be exploited.EPSS0.39%9.8CriticalCVE-2025-10396mayurik · pet_grooming_management_software +1 moreSourceCodester Pet Grooming Management Software edit_role.php sql injectionA vulnerability was determined in SourceCodester Pet Grooming Management Software 1.0. Affected by this issue is some unknown functionality of the file /admin/edit_role.php. Executing manipulation of the argument ID can lead to sql injection. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may be utilized.EPSS0.47%8.8HighCVE-2025-10431mayurik · pet_grooming_management_software +1 moreSourceCodester Pet Grooming Management Software ajax_represent.php sql injectionA vulnerability has been found in SourceCodester Pet Grooming Management Software 1.0. This affects an unknown part of the file /admin/ajax_represent.php. Such manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.EPSS0.39%9.8CriticalCVE-2025-10836mayurik · pet_grooming_management_software +1 moreSourceCodester Pet Grooming Management Software print1.php sql injectionA weakness has been identified in SourceCodester Pet Grooming Management Software 1.0. Affected is an unknown function of the file /admin/print1.php. Executing manipulation of the argument ID can lead to sql injection. The attack can be launched remotely. The exploit has been made available to the public and could be exploited.EPSS0.48%7.2HighCVE-2025-10087mayurik · pet_grooming_management_software +1 moreSourceCodester Pet Grooming Management Software profit_report.php sql injectionA security vulnerability has been detected in SourceCodester Pet Grooming Management Software 1.0. Impacted is an unknown function of the file /admin/profit_report.php. Such manipulation of the argument product_id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed publicly and may be used.EPSS0.41%9.8CriticalCVE-2025-10832mayurik · pet_grooming_management_software +1 moreSourceCodester Pet Grooming Management Software fetch_product_details.php sql injectionA vulnerability was found in SourceCodester Pet Grooming Management Software 1.0. The affected element is an unknown function of the file /admin/fetch_product_details.php. The manipulation of the argument barcode results in sql injection. The attack may be performed from remote. The exploit has been made public and could be used.EPSS0.48%8.8HighCVE-2025-10429mayurik · pet_grooming_management_software +1 moreSourceCodester Pet Grooming Management Software ajax_product.php sql injectionA vulnerability was detected in SourceCodester Pet Grooming Management Software 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/ajax_product.php. The manipulation of the argument drop_services results in sql injection. The attack can be launched remotely. The exploit is now public and may be used.EPSS0.39%9.8CriticalCVE-2025-10688mayurik · pet_grooming_management_software +1 moreSourceCodester Pet Grooming Management Software paid.php sql injectionA vulnerability was determined in SourceCodester Pet Grooming Management Software 1.0. This vulnerability affects unknown code of the file /admin/operation/paid.php. This manipulation of the argument inv_no/insta_amt causes sql injection. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized.EPSS0.48%8.8HighCVE-2025-10085mayurik · pet_grooming_management_software +1 moreSourceCodester Pet Grooming Management Software manage_website.php unrestricted uploadA security flaw has been discovered in SourceCodester Pet Grooming Management Software 1.0. This vulnerability affects unknown code of the file manage_website.php. The manipulation results in unrestricted upload. It is possible to launch the attack remotely. The exploit has been released to the public and may be exploited.EPSS0.38%9.8CriticalCVE-2025-10598mayurik · pet_grooming_management_software +1 moreSourceCodester Pet Grooming Management Software search_product.php sql injectionA vulnerability was identified in SourceCodester Pet Grooming Management Software 1.0. This issue affects some unknown processing of the file /admin/search_product.php. Such manipulation of the argument group_id leads to sql injection. The attack may be launched remotely. The exploit is publicly available and might be used.EPSS0.42%8.8HighCVE-2025-10083mayurik · pet_grooming_management_software +1 moreSourceCodester Pet Grooming Management Software profile.php unrestricted uploadA vulnerability was determined in SourceCodester Pet Grooming Management Software 1.0. Affected by this issue is some unknown functionality of the file /admin/profile.php. Executing manipulation can lead to unrestricted upload. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized.EPSS0.39%9.8CriticalCVE-2025-10801mayurik · pet_grooming_management_software +1 moreSourceCodester Pet Grooming Management Software edit_tax.php sql injectionA security vulnerability has been detected in SourceCodester Pet Grooming Management Software 1.0. This affects an unknown function of the file /admin/edit_tax.php. The manipulation of the argument ID leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used.EPSS0.60%8.8HighCVE-2025-6879mayurik · best_salon_management_system +1 moreSourceCodester Best Salon Management System add-tax.php sql injectionA vulnerability was found in SourceCodester Best Salon Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /panel/add-tax.php. The manipulation of the argument Name leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.EPSS0.45%8.8HighCVE-2025-6606mayurik · best_salon_management_system +1 moreSourceCodester Best Salon Management System add-services.php sql injectionA vulnerability, which was classified as critical, has been found in SourceCodester Best Salon Management System 1.0. This issue affects some unknown processing of the file /panel/add-services.php. The manipulation of the argument Type leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.EPSS0.45%8.8HighCVE-2025-6877mayurik · best_salon_management_system +1 moreSourceCodester Best Salon Management System edit-category.php sql injectionA vulnerability was found in SourceCodester Best Salon Management System 1.0. It has been classified as critical. This affects an unknown part of the file /panel/edit-category.php. The manipulation of the argument editid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.EPSS0.45%8.8HighCVE-2025-6875mayurik · best_salon_management_system +1 moreSourceCodester Best Salon Management System edit-subscription.php sql injectionA vulnerability has been found in SourceCodester Best Salon Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /panel/edit-subscription.php. The manipulation of the argument editid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.EPSS0.45%