CVE-2025-63298: mayurik pet_grooming_management_software Path Traversal: '../filedir'

Vulnerability summary

CVE-2025-63298 is a high (CVSS 8.2) Path Traversal: '../filedir' vulnerability in mayurik pet_grooming_management_software. EPSS estimates a 0.52% chance of exploitation in the next 30 days, higher than 42.9% of scored vulnerabilities. 1 public exploit is recorded.

Timeline

1. 30-10-2025
   PublishedVulnerability first disclosed.
2. 30-10-2025
   Last modifiedVulnerability information updated.

Description

A path traversal vulnerability was identified in SourceCodester Pet Grooming Management System 1.0, affecting the admin/manage_website.php component. An authenticated user with administrative privileges can leverage this flaw by submitting a specially crafted POST request, enabling the deletion of arbitrary files on the web server or underlying operating system.

• CWE-24Path Traversal: '../filedir'The product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize "../" sequences that can resolve to a location that is outside of that directory.