CVE-2025-10085

A security flaw has been discovered in SourceCodester Pet Grooming Management Software 1.0. This vulnerability affects unknown code of the file manage_website.php. The manipulation results in unrestricted upload. It is possible to launch the attack remotely. The exploit has been released to the public and may be exploited.

• CWE-284
• CWE-434
• CWE-434

• https://github.com/chen2496088236/CVE/issues/9Exploit, Issue Tracking, Third Party Advisory
• https://vuldb.com/?ctiid.323041Permissions Required, VDB Entry
• https://vuldb.com/?id.323041Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.644660Third Party Advisory, VDB Entry
• https://www.sourcecodester.com/Product

Published

Sep 8, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-1008The Recently Purchased Products For Woo plugin for WordPress…6.4
• CVE-2025-10080A vulnerability has been found in running-elephant Datart up…3.1
• CVE-2025-10081A flaw has been found in SourceCodester Pet Management Syste…7.2
• CVE-2025-10082A vulnerability has been found in SourceCodester Online Poll…9.8
• CVE-2025-10083A vulnerability was determined in SourceCodester Pet Groomin…8.8
• CVE-2025-10084A vulnerability was identified in elunez eladmin up to 2.7. …4.3
• CVE-2025-10086A weakness has been identified in fuyang_lipengjun platform …6.3
• CVE-2025-10087A security vulnerability has been detected in SourceCodester…7.2
• CVE-2025-10088A vulnerability was detected in SourceCodester Time Tracker …5.4
• CVE-2025-10089Uncontrolled Search Path Element Vulnerability in Setting an…7.7
• CVE-2025-1009An attacker could have caused a use-after-free via crafted X…9.8
• CVE-2025-10090A flaw has been found in Jinher OA up to 1.2. The impacted e…9.8