CVE-2026-1702

Summary

A vulnerability was detected in SourceCodester Pet Grooming Management Software 1.0. Impacted is an unknown function of the file /admin/operation/user.php of the component User Management. Performing a manipulation of the argument group_id results in improper authorization. The attack can be initiated remotely. The exploit is now public and may be used.

Affected Software

Weaknesses

• CWE-285: Improper Authorization
• CWE-266: Incorrect Privilege Assignment

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: poc
  • Automatable: no
  • Technical Impact: partial

References

• https://vuldb.com/?id.343492
• https://vuldb.com/?ctiid.343492
• https://vuldb.com/?submit.742226
• https://github.com/Asim-QAZi/Improper-Access-Control—in-Pet-Grooming-Management-Software
• https://www.sourcecodester.com/

• ←Previous
• Next→