358 matches found
Zoo Management System 1.0 - SQL Injection
Zoo Management System 1.0 contains a SQL injection vulnerability via the username parameter on the login page. An attacker can possibly obtain sensitive information from a database, modify data, and execute unauthorized administrative operations in the context of the affected site. id:...
CVE-2022-31897
CVE-2022-31897 日期:06/22/2022 漏洞作者:Angelo Pio Amirante 厂商主页:https://www.sourcecodester.com/ 软件链接:https://www.sourcecodester.com/php/15344/zoo-management-system-phpoop-free-source-code.html 版本:1.0 测试环境:服务器:Windows 10 上的 XAMPP CVE编号:CVE-2022-31897 描述: Zoo Management System 1.0...
CVE-2022-33075
CVE-2022-33075 Título del Exploit: Zoo Management System 1.0 - Cross-Site-Scripting Almacenado XSS Fecha: 26/05/2022 Autor del Exploit: Angelo Pio Amirante Página del Proveedor: https://www.sourcecodester.com/ Enlace del Software:...
CVE-2025-65881
CVE-2025-65881 El proyecto Zoo Management System v1.00 es vulnerable a Cross-site scripting XSS en /zms/classes/Login.php?f=login debido a: 1. Content-type inválido de las respuestas JSON en /zms/classes/Login.php?f=login 2. Entrada de usuario sin sanear en las respuestas Lo que permite a atacant...
EUVD-2026-17899
A Reflected Cross-Site Scripting XSS vulnerability exists in SourceCodester Zoo Management System v1.0. The vulnerability is located in the login page, specifically within the msg parameter. The application reflects the content of the msg parameter back to the user without proper HTML encoding or...
CVE-2026-30526
CVE-2026-30526 affects SourceCodester Zoo Management System v1.0. The vulnerability is located on the login page in the msg parameter, where user-supplied content is echoed back without proper HTML encoding/sanitization, enabling a reflected XSS via a crafted URL. The connected documents confirm ...
CVE-2026-30526
A Reflected Cross-Site Scripting XSS vulnerability exists in SourceCodester Zoo Management System v1.0. The vulnerability is located in the login page, specifically within the msg parameter. The application reflects the content of the msg parameter back to the user without proper HTML encoding or...
SourceCodester Zoo Management System 安全漏洞
The SourceCodester Zoo Management System is an open-source zoo management system developed by SourceCodester. Version 1.0 of the SourceCodester Zoo Management System contains a security vulnerability. This vulnerability stems from a reflection cross-site scripting vulnerability in the msg paramet...
CVE-2026-30526
A Reflected Cross-Site Scripting XSS vulnerability exists in SourceCodester Zoo Management System v1.0. The vulnerability is located in the login page, specifically within the msg parameter. The application reflects the content of the msg parameter back to the user without proper HTML encoding or...
CVE-2022-31897
SourceCodester Zoo Management System 1.0 is vulnerable to Cross Site Scripting XSS via publichtml/registervisitor?msg=...
CVE-2025-65881
Sourcecodester Zoo Management System v1.0 is vulnerable to Cross Site Scripting XSS in /classes/Login.php...
EUVD-2025-200291
Sourcecodester Zoo Management System v1.0 is vulnerable to Cross Site Scripting XSS in /classes/Login.php...
CVE-2025-65881
Sourcecodester Zoo Management System v1.0 is vulnerable to Cross Site Scripting XSS in /classes/Login.php...
CVE-2025-65881
Sourcecodester Zoo Management System v1.0 is vulnerable to Cross Site Scripting XSS in /classes/Login.php...
CVE-2025-65881
CVE-2025-65881 affects Sourcecodester Zoo Management System v1.0, with a stored/reflected Cross Site Scripting (XSS) flaw in the /classes/Login.php endpoint. The connected sources consistently identify the vulnerability as an XSS issue tied to that login script; no other product versions or compo...
CVE-2025-65881
Sourcecodester Zoo Management System v1.0 is vulnerable to Cross Site Scripting XSS in /classes/Login.php...
PT-2025-48743
Sourcecodester Zoo Management System v1.0 is vulnerable to Cross Site Scripting XSS in /classes/Login.php...
CVE-2025-65881
Sourcecodester Zoo Management System v1.0 is vulnerable to Cross Site Scripting XSS in /classes/Login.php...