CVE-2024-25351

Summary: CVE-2024-25351 is a SQL injection vulnerability affecting PHPGurukul Zoo Management System 1.0, located in the /zms/admin/changeimage.php endpoint and exploitable via the editid parameter. The issue allows an attacker to execute arbitrary SQL commands, enabling potential data disclosure ...