Path Traversal Vulnerability in SourceCodester Pet Grooming Management System
CVE-2025-63298
8.2HIGH
Key Information:
- Vendor
SourceCodester
- Vendor
- CVE Published:
- 30 October 2025
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2025-63298?
A path traversal vulnerability exists in SourceCodester's Pet Grooming Management System version 1.0. This flaw, located in the admin/manage_website.php component, allows an authenticated user with administrative privileges to execute specially crafted POST requests. By exploiting this vulnerability, attackers can delete arbitrary files on the web server or the underlying operating system, potentially leading to significant data loss and system compromise.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.