Zoo Management System SQL Injection Vulnerability (CNVD-2023-72245)

Zoo Management System is a zoo management system. It provides an online and automated platform for zoo organizations to manage their daily records. Zoo Management System v1.0 suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements on the Admin sign-in page. An attacker can exploit this vulnerability to execute illegal SQL commands to steal sensitive database data.