Description
A flaw has been found in SourceCodester Pet Grooming Management Software 1.0. Affected is an unknown function of the file /admin/. This manipulation causes file and directory information exposure. The attack can be initiated remotely. The exploit has been published and may be used.
Published: 2026-06-01
Score: 6.9 Medium
EPSS: n/a
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

An application flaw in SourceCodester Pet Grooming Management Software version 1.0 allows the execution of an unknown function within the /admin/ directory, resulting in the exposure of file and directory information. The vulnerability can be triggered from a remote location and enables an attacker to retrieve sensitive server details that should remain internal. The disclosed data could include configuration files, executable binaries or other assets in the administrative area, potentially aiding further compromise or violating privacy requirements.

Affected Systems

The affected software is SourceCodester Pet Grooming Management Software, version 1.0, deployed on a web server that hosts the /admin/ interface. The issue is limited to this product and version; no other versions or related products are currently listed as impacted.

Risk and Exploitability

The vulnerability carries a CVSS score of 6.9, indicating moderate severity for information disclosure. EPSS data is unavailable, and the issue is not listed in the CISA KEV catalog. Exploit code has been published and the attack can be initiated remotely, meaning any exposed instance of the software without proper access restrictions is susceptible to abuse. The disclosure not only leaks directory listings but may surface other confidential files, increasing the potential for targeted attacks.

Generated by OpenCVE AI on June 1, 2026 at 14:37 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Deploy the vendor‑supplied patch for SourceCodester Pet Grooming Management Software 1.0 or later as soon as it becomes available.
  • Restrict access to the /admin/ directory by requiring authentication, applying role‑based access control, or employing IP‑whitelisting to limit exposure to authorized users only.
  • Review the application for proper authorization checks and input validation, ensuring that file‑system access is appropriately gated and update any custom code that interacts with the administrative interface accordingly.

Generated by OpenCVE AI on June 1, 2026 at 14:37 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Mon, 01 Jun 2026 15:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Mon, 01 Jun 2026 13:00:00 +0000

Type Values Removed Values Added
Description A flaw has been found in SourceCodester Pet Grooming Management Software 1.0. Affected is an unknown function of the file /admin/. This manipulation causes file and directory information exposure. The attack can be initiated remotely. The exploit has been published and may be used.
Title SourceCodester Pet Grooming Management Software admin file information disclosure
First Time appeared Sourcecodester
Sourcecodester pet Grooming Management Software
Weaknesses CWE-200
CWE-538
CPEs cpe:2.3:a:sourcecodester:pet_grooming_management_software:*:*:*:*:*:*:*:*
Vendors & Products Sourcecodester
Sourcecodester pet Grooming Management Software
References
Metrics cvssV2_0

{'score': 5, 'vector': 'AV:N/AC:L/Au:N/C:P/I:N/A:N/E:POC/RL:ND/RC:UR'}

cvssV3_0

{'score': 5.3, 'vector': 'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R'}

cvssV3_1

{'score': 5.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R'}

cvssV4_0

{'score': 6.9, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P'}

Subscriptions

Sourcecodester Pet Grooming Management Software
cve-icon MITRE

Status: PUBLISHED

Assigner: VulDB

Published:

Updated: 2026-06-01T14:51:41.218Z

Reserved: 2026-05-31T12:20:39.702Z

Link: CVE-2026-10254

cve-icon Vulnrichment

Updated: 2026-06-01T14:51:37.600Z

cve-icon NVD

Status : Deferred

Published: 2026-06-01T13:16:29.560

Modified: 2026-06-01T15:15:37.293

Link: CVE-2026-10254

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-06-01T14:45:26Z

Weaknesses