CVE-2025-14638

A security vulnerability has been detected in itsourcecode Online Pet Shop Management System 1.0. This issue affects some unknown processing of the file /pet1/update_cnp.php. Such manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been disclosed publicly and may be used.

• CWE-74
• CWE-89
• CWE-89

• https://github.com/qingdus/temp_cve/issues/2Exploit, Issue Tracking, Third Party Advisory
• https://itsourcecode.com/Product
• https://vuldb.com/?ctiid.336363Permissions Required, VDB Entry
• https://vuldb.com/?id.336363Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.709625Third Party Advisory, VDB Entry

Published

Dec 14, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-14631A NULL Pointer Dereference vulnerability in TP-Link Archer B…6.5
• CVE-2025-14632The Filr – Secure document library plugin for WordPress is v…4.4
• CVE-2025-14633The F70 Lead Document Download plugin for WordPress is vulne…5.3
• CVE-2025-14635The Happy Addons for Elementor plugin for WordPress is vulne…6.4
• CVE-2025-14636A security flaw has been discovered in Tenda AX9 22.03.01.46…3.7
• CVE-2025-14637A weakness has been identified in itsourcecode Online Pet Sh…9.8
• CVE-2025-14639A vulnerability was detected in itsourcecode Student Managem…9.8
• CVE-2025-1464A vulnerability, which was classified as critical, has been …7.3
• CVE-2025-14640A flaw has been found in code-projects Student File Manageme…9.8
• CVE-2025-14641A flaw has been found in code-projects Computer Laboratory S…7.2
• CVE-2025-14642A vulnerability has been found in code-projects Computer Lab…7.2
• CVE-2025-14643A vulnerability was found in code-projects Simple Attendance…9.8