CVE-2025-63298

A path traversal vulnerability was identified in SourceCodester Pet Grooming Management System 1.0, affecting the admin/manage_website.php component. An authenticated user with administrative privileges can leverage this flaw by submitting a specially crafted POST request, enabling the deletion of arbitrary files on the web server or underlying operating system.

View graph Watch Export

CVSS v3.1

8.2 HIGH

EPSS

0.48%

probability of exploitation in 30 days

CISA KEV

Not listed

no confirmed exploitation reported

News coverage

sources referencing this CVE

CVSS v3.1 Detail

Attack VectorNETWORK

Attack ComplexityLOW

Privileges RequiredNONE

User InteractionNONE

ScopeUNCHANGED

ConfidentialityLOW

IntegrityNONE

AvailabilityHIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H

Connections

2 relationships

CWE-24

source

Timeline

disclosure → media coverage

Oct 30, 2025

Disclosure — published as a CVE record. · last revised by NVD Nov 6, 2025

Public PoC (1)

github.com/z3rObyte/CVE-2025-63298

Unverified third-party code — review before executing.