Lucene search
+L

661 matches found

Positive Technologies
Positive Technologies
added 2022/09/26 12:00 a.m.11 views

PT-2022-25622

Name of the Vulnerable Software and Affected Versions Zoo Management System version 1.0 Description The issue is related to an arbitrary file upload vulnerability in the picture upload point of the "save animal" file of the "Animals" module in the background management system. Recommendations For...

7.2CVSS7.2AI score0.01041EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
added 2022/09/26 12:00 a.m.8 views

PT-2022-25623 · Unknown · Zoo Management System

Name of the Vulnerable Software and Affected Versions: Zoo Management System version 1.0 Description: The issue is related to an arbitrary file upload vulnerability in the picture upload point of the "save event" file of the "Events" module in the background management system. This vulnerability ...

7.2CVSS6.8AI score0.00993EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2022/09/26 12:00 a.m.9 views

Zoo Management System 代码问题漏洞

Zoo Management System is a zoo management system. It provides an online and automated platform for zoo organizations to manage their daily records. An arbitrary file upload vulnerability exists in Zoo Management System v1.0, which arises from a lack of validation of uploaded files at the image...

7.2CVSS7.7AI score0.00993EPSS
SaveExploits1References2
OSV
OSV
added 2022/09/22 4:15 p.m.11 views

CVE-2022-40932

In Zoo Management System v1.0, there is an arbitrary file upload vulnerability in the picture upload point of the "gallery" file of the "Gallery" module in the background management system...

7.2CVSS5.9AI score0.00973EPSS
SaveExploits1References1
Prion
Prion
added 2022/09/22 4:15 p.m.20 views

Privilege escalation

In Zoo Management System v1.0, there is an arbitrary file upload vulnerability in the picture upload point of the "gallery" file of the "Gallery" module in the background management system...

5.8CVSS7AI score0.00973EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2022/09/22 3:59 p.m.35 views

CVE-2022-40932

In Zoo Management System v1.0, there is an arbitrary file upload vulnerability in the picture upload point of the "gallery" file of the "Gallery" module in the background management system...

7.3AI score0.00973EPSS
SaveExploits1References1
CVE
CVE
added 2022/09/22 3:59 p.m.60 views

CVE-2022-40932

CVE-2022-40932 affects Zoo Management System v1.0. The vulnerability is an arbitrary file upload in the Gallery module’s picture upload point of the background management system (Gallery file). Impact is described as high for confidentiality, integrity, and availability. Practical remediation det...

7.2CVSS7AI score0.00973EPSS
SaveExploits1References1Affected Software1
Vulnrichment
Vulnrichment
added 2022/09/22 3:59 p.m.9 views

CVE-2022-40932

In Zoo Management System v1.0, there is an arbitrary file upload vulnerability in the picture upload point of the "gallery" file of the "Gallery" module in the background management system...

7.1AI score0.00973EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2022/09/22 12:00 a.m.10 views

PT-2022-25630 · Unknown · Zoo Management System

Name of the Vulnerable Software and Affected Versions: Zoo Management System version 1.0 Description: The issue is related to an arbitrary file upload vulnerability. This vulnerability is located in the picture upload point of the gallery file of the Gallery module in the background management...

7.2CVSS6.8AI score0.00973EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2022/09/22 12:00 a.m.12 views

Zoo Management System 代码问题漏洞

Zoo Management System is a zoo management system by Carlo Montero, an individual developer. It provides an online and automated platform for zoo organizations to manage their daily records. A security vulnerability exists in Zoo Management System v1.0, which originates from an arbitrary file uplo...

7.2CVSS7.2AI score0.00973EPSS
SaveExploits1References2
Openbugbounty
Openbugbounty
added 2022/09/08 1:35 p.m.21 views

nashvillezoo.org Cross Site Scripting vulnerability OBB-2903160

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
NVD
NVD
added 2022/08/12 8:15 p.m.21 views

CVE-2022-2803

A vulnerability was found in SourceCodester Zoo Management System and classified as critical. This issue affects some unknown processing of the file /pages/animals.php. The manipulation of the argument classid leads to sql injection. The attack may be initiated remotely. The exploit has been...

9.8CVSS0.00849EPSS
SaveExploits1References2
NVD
NVD
added 2022/08/12 8:15 p.m.28 views

CVE-2022-2804

A vulnerability was found in SourceCodester Zoo Management System. It has been classified as critical. Affected is an unknown function of the file /pages/applyvacancy.php. The manipulation of the argument filename leads to unrestricted upload. It is possible to launch the attack remotely. The...

9.8CVSS0.00961EPSS
SaveExploits1References2
Prion
Prion
added 2022/08/12 8:15 p.m.21 views

Design/Logic Flaw

A vulnerability was found in SourceCodester Zoo Management System. It has been classified as critical. Affected is an unknown function of the file /pages/applyvacancy.php. The manipulation of the argument filename leads to unrestricted upload. It is possible to launch the attack remotely. The...

7.5CVSS9.5AI score0.00961EPSS
SaveExploits1References2
Prion
Prion
added 2022/08/12 8:15 p.m.21 views

Sql injection

A vulnerability was found in SourceCodester Zoo Management System and classified as critical. This issue affects some unknown processing of the file /pages/animals.php. The manipulation of the argument classid leads to sql injection. The attack may be initiated remotely. The exploit has been...

7.5CVSS9.7AI score0.00849EPSS
SaveExploits1References2
CVE
CVE
added 2022/08/12 7:45 p.m.68 views

CVE-2022-2804

SourceCodester Zoo Management System contains a vulnerability in an unknown function of the file /pages/apply_vacancy.php where modifying the filename argument enables unrestricted file upload. This allows remote exploitation, with public disclosure of the exploit noted. Several sources consisten...

9.8CVSS8.1AI score0.00961EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2022/08/12 7:45 p.m.38 views

CVE-2022-2804 SourceCodester Zoo Management System apply_vacancy.php unrestricted upload

A vulnerability was found in SourceCodester Zoo Management System. It has been classified as critical. Affected is an unknown function of the file /pages/applyvacancy.php. The manipulation of the argument filename leads to unrestricted upload. It is possible to launch the attack remotely. The...

6.3CVSS9.8AI score0.00961EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2022/08/12 7:45 p.m.16 views

CVE-2022-2804 SourceCodester Zoo Management System apply_vacancy.php unrestricted upload

A vulnerability was found in SourceCodester Zoo Management System. It has been classified as critical. Affected is an unknown function of the file /pages/applyvacancy.php. The manipulation of the argument filename leads to unrestricted upload. It is possible to launch the attack remotely. The...

6.3CVSS9.6AI score0.00961EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2022/08/12 7:45 p.m.33 views

CVE-2022-2803 SourceCodester Zoo Management System animals.php sql injection

A vulnerability was found in SourceCodester Zoo Management System and classified as critical. This issue affects some unknown processing of the file /pages/animals.php. The manipulation of the argument classid leads to sql injection. The attack may be initiated remotely. The exploit has been...

6.3CVSS10AI score0.00849EPSS
SaveExploits1References2
CVE
CVE
added 2022/08/12 7:45 p.m.76 views

CVE-2022-2803

CVE-2022-2803 affects SourceCodester Zoo Management System. The vulnerability is a SQL injection in /pages/animals.php triggered by manipulating the class_id parameter. Exploitation is remote and the exploit has been disclosed publicly. Connected sources (Red Hat, NVD, CVE listings, PT Security, ...

9.8CVSS8.3AI score0.00849EPSS
SaveExploits1References2Affected Software1
Rows per page
Query Builder