27
CVEs
0
Critical
0
High
0
KEV
27
PoC
0
Unpatched C/H
0.0%
Patch Rate
0.0%
Avg EPSS
Severity Breakdown
CRITICAL
0
HIGH
0
MEDIUM
14
LOW
13
Monthly CVE Trend
Affected Products (29)
PHP
255
Best House Rental Management System
37
Best Salon Management System
33
Pet Grooming Management Software
26
Advocate Office Management System
26
Online Tour Travel Management System
20
Best Courier Management System
19
Petrol Pump Management
16
Best Online News Portal
13
Best Employee Management System
12
Php Task Management System
11
Best Church Management Software
10
Online Tours Travels Management System
7
Inventory Management System
6
Free And Open Source Inventory Management System
6
Gas Agency Management System
4
Courier Management System
3
Free Hospital Management System For Small Practices
3
Best Pos Management System
3
Hospital Management System
3
Online Student Management System
2
Modern Loan Management System
2
Online Tours And Travels Management System
1
Online Hospital Management System
1
House Rental Management System
1
Best House Rental Management
1
Employee Management System
1
Sacco Management System
1
Best Free Law Office Management
1
Top Risky CVEs
| CVE | Summary | Severity | CVSS | EPSS | Priority | Signals |
|---|---|---|---|---|---|---|
| CVE-2025-61087 | SourceCodester Pet Grooming Management Software 1.0 is vulnerable to Cross Site Scripting (XSS) via the Customer Name field under Customer Management Section. | MEDIUM | 6.1 | 0.0% | 51 |
PoC
No patch
|
| CVE-2025-10801 | A security vulnerability has been detected in SourceCodester Pet Grooming Management Software 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available. | MEDIUM | 5.5 | 0.0% | 48 |
PoC
No patch
|
| CVE-2025-10598 | A vulnerability was identified in SourceCodester Pet Grooming Management Software 1.0.php. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available. | MEDIUM | 5.5 | 0.0% | 48 |
PoC
No patch
|
| CVE-2025-10688 | A vulnerability was determined in SourceCodester Pet Grooming Management Software 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available. | MEDIUM | 5.5 | 0.0% | 48 |
PoC
No patch
|
| CVE-2025-10832 | A vulnerability was found in SourceCodester Pet Grooming Management Software 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available. | MEDIUM | 5.5 | 0.0% | 48 |
PoC
No patch
|
| CVE-2025-10836 | A weakness has been identified in SourceCodester Pet Grooming Management Software 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available. | MEDIUM | 5.5 | 0.0% | 48 |
PoC
No patch
|
| CVE-2025-11057 | A vulnerability has been found in SourceCodester Pet Grooming Management Software 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available. | MEDIUM | 5.5 | 0.0% | 48 |
PoC
No patch
|
| CVE-2025-11614 | SQL injection in SourceCodester Best Salon Management System 1.0 allows remote attackers to compromise the application database via the editid parameter in /panel/edit-appointment.php. Publicly available exploit code exists, and the vulnerability can be triggered without authentication. EPSS score is 0.03%, indicating low exploitation probability despite the easy remote attack vector. | MEDIUM | 5.5 | 0.0% | 48 |
PoC
No patch
|
| CVE-2025-11615 | SQL injection in SourceCodester Best Salon Management System 1.0 allows unauthenticated remote attackers to manipulate the ServiceId parameter in /panel/add_invoice.php, potentially accessing or modifying database contents. Public proof-of-concept code is available, though EPSS indicates low exploitation probability (0.03%) and no active exploitation is confirmed. | MEDIUM | 5.5 | 0.0% | 48 |
PoC
No patch
|
| CVE-2025-11662 | SQL injection in Best Salon Management System 1.0 allows remote attackers to manipulate the serv_id parameter in /booking.php, potentially gaining unauthorized access to the database or modifying data. A public exploit is available, though EPSS assigns a low exploitation probability (0.03%). No active exploitation is reported. | MEDIUM | 5.5 | 0.0% | 48 |
PoC
No patch
|
| CVE-2025-12208 | SQL injection in SourceCodester Best House Rental Management System 1.0 allows unauthenticated remote attackers to manipulate the Username parameter in the login2 function of /admin_class.php, enabling authentication bypass or database enumeration. A public proof-of-concept exploit has been published on GitHub, confirming exploitability. No KEV listing and a low EPSS score (0.03%, 8th percentile) suggest exploitation remains opportunistic and low-volume, consistent with the niche deployment footprint of this PHP script. | MEDIUM | 5.5 | 0.0% | 48 |
PoC
No patch
|
| CVE-2025-12325 | SQL injection in SourceCodester Best Salon Management System 1.0 exposes unauthenticated remote attackers to database manipulation via the `email` parameter in the `/panel/forgot-password.php` password recovery endpoint. A public proof-of-concept exploit has been disclosed, though EPSS at 0.03% (8th percentile) and absence from CISA KEV indicate very low observed real-world exploitation. Impact is partial across confidentiality, integrity, and availability per the CVSS 4.0 scoring, consistent with a restricted database account context rather than full system compromise. | MEDIUM | 5.5 | 0.0% | 48 |
PoC
No patch
|
| CVE-2025-10835 | A security flaw has been discovered in SourceCodester Pet Grooming Management Software 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available. | LOW | 2.1 | 0.0% | 31 |
PoC
No patch
|
| CVE-2026-3737 | Pet Grooming Management Software versions up to 1.0 contains a vulnerability that allows attackers to improper authorization (CVSS 6.3). | LOW | 2.1 | 0.0% | 31 |
PoC
No patch
|
| CVE-2026-3738 | Improper authorization in SourceCodester Pet Grooming Management Software 1.0 allows authenticated remote attackers to gain unauthorized access to the Financial Report Page, potentially viewing or modifying sensitive financial data. Public exploit code exists for this vulnerability, and no patch is currently available, leaving affected installations at risk of information disclosure and data manipulation. | LOW | 2.1 | 0.0% | 31 |
PoC
No patch
|