CVE-2026-7447 — SourceCodester Pet Grooming Management Software SQL Injection

title: CVE-2026-7447 - SourceCodester Pet Grooming Management SQL Injection via update_customer.php
id: scw-2026-04-30-ai-1
status: experimental
level: high
description: |
  Detects attempts to exploit CVE-2026-7447 by targeting the update_customer.php script with SQL injection payloads. The presence of typical SQL injection syntax within the URI query parameters targeting this specific file indicates a potential exploitation attempt.
author: SCW Feed Engine (AI-generated)
date: 2026-04-30
references:
  - https://shimiscyberworld.com/posts/nvd-CVE-2026-7447/
tags:
  - attack.initial_access
  - attack.t1190
logsource:
    category: webserver
detection:
  selection:
      uri|contains:
          - '/admin/update_customer.php'
      cs-uri-query|contains:
          - "' OR "
          - "' UNION SELECT"
          - "' AND "
      condition: selection
falsepositives:
  - Legitimate administrative activity

Source: Shimi's Cyber World · License & reuse