{"id":"CVE-2026-3738","state":"PUBLISHED","title":"SourceCodester Pet Grooming Management Software Financial Report improper authorization","description":"A vulnerability was identified in SourceCodester Pet Grooming Management Software 1.0. This vulnerability affects unknown code of the component Financial Report Page. The manipulation leads to improper authorization. Remote exploitation of the attack is possible. The exploit is publicly available and might be used.","publishedAt":"2026-03-08T13:32:11.189Z","updatedAt":"2026-03-12T14:59:38.533Z","severity":{"score":5.3,"label":"Medium","version":"4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P","source":"VulDB"},"assigner":"VulDB","products":["SourceCodester Pet Grooming Management Software"],"affected":[{"vendor":"SourceCodester","product":"Pet Grooming Management Software","versions":[{"version":"1.0","status":"affected"}],"modules":["Financial Report Page"]}],"references":["https://vuldb.com/?id.349716","https://vuldb.com/?ctiid.349716","https://vuldb.com/?submit.767321","https://github.com/hiranerakkot/Pet-Grooming-Software/blob/main/Vulnerability_2.md","https://www.sourcecodester.com/"],"weaknesses":["CWE-285","CWE-266"],"ingestedAt":"2026-10-29T20:11:50.837Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/3xxx/CVE-2026-3738.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-3738","state":"PUBLISHED","datePublished":"2026-03-08T13:32:11.189Z","dateUpdated":"2026-03-12T14:59:38.533Z","assignerShortName":"VulDB","assignerOrgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateReserved":"2026-03-07T18:11:09.978Z"},"containers":{"cna":{"title":"SourceCodester Pet Grooming Management Software Financial Report improper authorization","descriptions":[{"lang":"en","value":"A vulnerability was identified in SourceCodester Pet Grooming Management Software 1.0. This vulnerability affects unknown code of the component Financial Report Page. The manipulation leads to improper authorization. Remote exploitation of the attack is possible. The exploit is publicly available and might be used."}],"affected":[{"vendor":"SourceCodester","product":"Pet Grooming Management Software","versions":[{"version":"1.0","status":"affected"}],"modules":["Financial Report Page"]}],"references":[{"url":"https://vuldb.com/?id.349716","name":"VDB-349716 | SourceCodester Pet Grooming Management Software Financial Report improper authorization","tags":["vdb-entry"]},{"url":"https://vuldb.com/?ctiid.349716","name":"VDB-349716 | CTI Indicators (IOB, IOC, TTP)","tags":["signature","permissions-required"]},{"url":"https://vuldb.com/?submit.767321","name":"Submit #767321 | SourceCodester Pet Grooming Management Software 1.0 Improper Authorization","tags":["third-party-advisory"]},{"url":"https://github.com/hiranerakkot/Pet-Grooming-Software/blob/main/Vulnerability_2.md","tags":["exploit"]},{"url":"https://www.sourcecodester.com/","tags":["product"]}],"metrics":[{"cvssV4_0":{"version":"4.0","baseScore":5.3,"vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P","baseSeverity":"MEDIUM"}},{"cvssV3_1":{"version":"3.1","baseScore":6.3,"vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R","baseSeverity":"MEDIUM"}},{"cvssV3_0":{"version":"3.0","baseScore":6.3,"vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R","baseSeverity":"MEDIUM"}},{"cvssV2_0":{"version":"2.0","baseScore":6.5,"vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-285","type":"CWE","lang":"en","description":"Improper Authorization"}]},{"descriptions":[{"cweId":"CWE-266","type":"CWE","lang":"en","description":"Incorrect Privilege Assignment"}]}],"providerMetadata":{"shortName":"VulDB","orgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateUpdated":"2026-03-08T13:32:11.189Z"},"timeline":[{"time":"2026-03-07T00:00:00.000Z","lang":"en","value":"Advisory disclosed"},{"time":"2026-03-07T01:00:00.000Z","lang":"en","value":"VulDB entry created"},{"time":"2026-03-07T19:16:16.000Z","lang":"en","value":"VulDB entry last update"}],"credits":[{"lang":"en","value":"Hiran (VulDB User)","type":"reporter"}],"tags":["x_freeware"]},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-03-12T14:59:31.678564Z","id":"CVE-2026-3738","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-03-12T14:59:38.533Z"}}]}}}