CVE-2024-25351

The PHPGurukul Zoo Management System version 1.0 is vulnerable to a SQL Injection flaw in the /zms/admin/changeimage.php API endpoint. The root cause is the improper neutralization of special elements in the editid parameter, which allows an attacker to execute arbitrary SQL commands. This vulner...