The change password functionality at /pet_grooming/admin/change_pass.php in SourceCodester Pet Grooming Management Software 1.0 is vulnerable to Cross-Site Request Forgery (CSRF) attacks. The application does not implement adequate anti-CSRF tokens or same-site cookie restrictions, allowing attackers to trick authenticated users into unknowingly changing their passwords.
References
| Link | Resource |
|---|---|
| https://github.com/floccocam-cpu/CVE-Research-2025/blob/main/CVE-2025-63717/README6.md | Exploit Third Party Advisory |
| https://www.sourcecodester.com/php/18340/pet-grooming-management-software-download.html | Product |
Configurations
History
17 Nov 2025, 18:40
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/floccocam-cpu/CVE-Research-2025/blob/main/CVE-2025-63717/README6.md - Exploit, Third Party Advisory | |
| References | () https://www.sourcecodester.com/php/18340/pet-grooming-management-software-download.html - Product | |
| First Time |
Mayurik
Mayurik pet Grooming Management Software |
|
| CPE | cpe:2.3:a:mayurik:pet_grooming_management_software:1.0:*:*:*:*:*:*:* |
12 Nov 2025, 20:15
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-352 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.5 |
07 Nov 2025, 19:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-11-07 19:16
Updated : 2025-11-17 18:40
NVD link : CVE-2025-63717
Mitre link : CVE-2025-63717
CVE.ORG link : CVE-2025-63717
JSON object : View
Products Affected
mayurik
- pet_grooming_management_software
CWE
CWE-352
Cross-Site Request Forgery (CSRF)