Path Traversal Vulnerability in SourceCodester Pet Grooming Management System
CVE-2025-63298
8.2HIGH
Key Information:
- Vendor
SourceCodester
- Vendor
- CVE Published:
- 30 October 2025
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2025-63298?
A path traversal vulnerability exists in SourceCodester's Pet Grooming Management System version 1.0. This flaw, located in the admin/manage_website.php component, allows an authenticated user with administrative privileges to execute specially crafted POST requests. By exploiting this vulnerability, attackers can delete arbitrary files on the web server or the underlying operating system, potentially leading to significant data loss and system compromise.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.
References
CVSS V3.1
Score:
8.2
Severity:
HIGH
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
- 🟡
Public PoC available
- 👾
Exploit known to exist
Vulnerability published
Vulnerability Reserved