CVE-2024-25351

Summary: CVE-2024-25351 is a SQL injection vulnerability affecting PHPGurukul Zoo Management System 1.0, located in the /zms/admin/changeimage.php endpoint and exploitable via the editid parameter. The issue allows an attacker to execute arbitrary SQL commands, enabling potential data disclosure ...

CVE-2024-25350

CVE-2024-25350 affects PHPGurukul Zoo Management System 1.0, with a SQL Injection vulnerability in /zms/admin/edit-ticket.php exploitable via the tickettype and tprice parameters. The primary advisory cites a CVSS v3.1 base score of 9.8 (CRITICAL) with NETWORK attackVector, LOW attackComplexity, ...

CVE-2022-27351

The CVE-2022-27351 entry describes an arbitrary file upload vulnerability in Zoo Management System v1.0, exploitable via the /public_html/apply_vacancy endpoint. The underlying issue is lack of file-type restrictions, allowing an attacker to upload a crafted PHP file and achieve arbitrary code ex...

CVE-2022-27992

CVE-2022-27992 is a SQL injection vulnerability in Zoo Management System v1.0 (PHPGurukul Zoo Management System). Multiple sources confirm that the issue resides in the /public_html/animals endpoint, exploitable via the class_id parameter, caused by missing input validation/filtering. This allows...

CVE-2022-31897

SourceCodester Zoo Management System 1.0 is vulnerable to reflected XSS via public_html/register_visitor?msg= due to inadequate input validation/output encoding of the msg parameter. The issue can allow crafted payloads to execute script in victims’ browsers, with PoCs and exploits circulated pub...

CVE-2020-25487

The CVE-2020-25487 affects PHPGURUKUL Zoo Management System Using PHP and MySQL version 1.0 . The vulnerability is an SQL Injection delivered via the endpoint zms/animal-detail.php , enabling manipulation of database queries. The source indicates the issue is tied to this endpoint; there is no av...

CVE-2022-1816

CVE-2022-1816 affects Zoo Management System 1.0. An authenticated user can exploit an XSS in the content module at /zoo/admin/public_html/view_accounts?type=zookeeper by manipulating the admin_name parameter with , as described across multiple sources. Exploit details have been disclosed publicly...

CVE-2024-5359

CVE-2024-5359 affects PHPGurukul Zoo Management System v2.1, with a SQL injection in /admin/foreigner-search.php via the searchdata parameter. Exploitation appears remote and publicly disclosed. Connected sources corroborate the file and parameter as the entry point; no official patch/version det...

CVE-2022-33075

CVE-2022-33075 is a stored XSS vulnerability in Zoo Management System v1.0, arising in the Add Classification functionality. The issue, reported across multiple sources, allows an attacker to cause execution of arbitrary web scripts/HTML via unspecified vectors, with impact described as client-si...

CVE-2022-40925

CVE-2022-40925 affects Zoo Management System v1.0. The vulnerability is an arbitrary file upload in the picture upload point of the save_event file within the Events module of the backend management system, caused by a lack of validation for uploaded files. This can enable remote code execution a...

CVE-2023-41615

CVE-2023-41615 affects Zoo Management System v1.0, with multiple SQL injection vulnerabilities in the Admin sign‑in page via the username and password fields. The root cause is insufficient input validation on the sign‑in form, enabling arbitrary SQL execution and potential data theft. While seve...

CVE-2024-5358

CVE-2024-5358 affects PHPGurukul Zoo Management System 2.1, specifically the /admin/normal-search.php file. The vulnerability arises from unsafely manipulating the searchdata argument, leading to SQL injection. Exploitation is described as remote, with public disclosure. Remediation or patches ar...

CVE-2022-31914

CVE-2022-31914 affects Zoo Management System v1.0. The vulnerability is a Cross Site Scripting (XSS) flaw exposed via the endpoint zms/admin/public_html/save_animal?an_id=24 (an_id parameter). The connected sources consistently describe XSS in this API path; exploitation status is not provided in...

CVE-2024-5357

CVE-2024-5357 concerns a SQL injection in PHPGurukul Zoo Management System 2.1, triggered by manipulating the email parameter in /admin/forgot-password.php. The attack is remotely exploitable and affects an unknown functionality, with multiple sources labeling it as critical/high impact. Connecte...

CVE-2022-2803

CVE-2022-2803 affects SourceCodester Zoo Management System. The vulnerability is a SQL injection in /pages/animals.php triggered by manipulating the class_id parameter. Exploitation is remote and the exploit has been disclosed publicly. Connected sources (Red Hat, NVD, CVE listings, PT Security, ...

CVE-2022-40924

CVE-2022-40924 concerns Zoo Management System v1.0. An arbitrary file upload vulnerability exists in the picture upload point of the save_animal file in the Animals module. The root cause is a lack of validation of the uploaded file. Reported impacts include the potential for remote code executio...

CVE-2025-3231

CVE-2025-3231 affects PHPGurukul Zoo Management System 2.1. The vulnerability is a SQL injection in the aboutus.php file, caused by missing validation of the pagetitle parameter. Documents consistently describe remote exploitation with potential data exposure and manipulation. Impact of the vulne...

CVE-2022-2804

SourceCodester Zoo Management System contains a vulnerability in an unknown function of the file /pages/apply_vacancy.php where modifying the filename argument enables unrestricted file upload. This allows remote exploitation, with public disclosure of the exploit noted. Several sources consisten...

CVE-2023-41614

The CVE-2023-41614 entry describes a stored XSS in Zoo Management System v1.0, specifically in the Add Animal Details function where an attacker can inject a payload via the Description of Animal parameter. Affected component: Add Animal Details (Description of Animal). Impact per sources: arbitr...

CVE-2024-5360

PHPGurukul Zoo Management System 2.1 contains a SQL injection in /admin/foreigner-bwdates-reports-details.php via the fromdate parameter. The vulnerability allows remote exploitation and has been publicly disclosed. Several sources corroborate impact and scope but do not provide an available fix/...

CVE-2024-5361

CVE-2024-5361 refers to a SQL injection vulnerability in PHPGurukul Zoo Management System 2.1, specifically in the file /admin/normal-bwdates-reports-details.php where the parameter fromdate can be manipulated to trigger database injection. Several connected records corroborate remote exploitatio...

CVE-2025-2656

CVE-2025-2656 affects PHPGurukul Zoo Management System 2.1. The vulnerability resides in an unknown function of the file /admin/login.php where the Username parameter is manipulated to induce an SQL injection. The impact is web-facing, with remote exploitation possible and payloads disclosed publ...

CVE-2022-40932

CVE-2022-40932 affects Zoo Management System v1.0. The vulnerability is an arbitrary file upload in the Gallery module’s picture upload point of the background management system (Gallery file). Impact is described as high for confidentiality, integrity, and availability. Practical remediation det...

CVE-2025-4765

CVE-2025-4765 affects PHPGurukul Zoo Management System 2.1, specifically the /admin/contactus.php file where the mobnum parameter is vulnerable to SQL injection. The vulnerability allows remote exploitation and the exploit has been publicly disclosed. Exploitation details are documented across mu...

CVE-2021-4232

The CVE-2021-4232 entry for Zoo Management System 1.0 is confirmed to describe a cross-site scripting vulnerability in admin/manage-ticket.php. The issue arises from improper input handling and demonstrated by the vector , exploitable remotely. Affected component is an unknown function in admin/m...

CVE-2025-4910

PHPGurukul Zoo Management System 2.1 contains a SQL injection in the aname parameter of /admin/edit-animal-details.php. The issue can be exploited remotely; multiple sources describe potential data exposure and manipulation. Connected documents corroborate the vulnerability and suggest mitigation...

CVE-2025-4911

The CVE-2025-4911 entry concerns PHPGurukul Zoo Management System 2.1, where the vulnerable component is the file /admin/view-foreigner-ticket.php. Multiple connected sources confirm that manipulation of the viewid parameter enables SQL injection, with remote exploitation possible and public disc...

CVE-2025-4766

CVE-2025-4766 details (PHPGurukul Zoo Management System 2.1) : A SQL injection vulnerability exists in the /admin/profile.php endpoint, triggered by manipulating the contactnumber parameter. The issue affects an unknown functionality of that file and can be exploited remotely; the exploit has bee...

CVE-2025-7158

The CVE-2025-7158 entry concerns PHPGurukul Zoo Management System 2.1. The vulnerability is a SQL injection in the file /admin/manage-normal-ticket.php, caused by unsafely handling the ID parameter. It is exploitable remotely and has been publicly disclosed. Several connected sources (CNVD/CNNVD/...

CVE-2025-7159

CVE-2025-7159 affects PHPGurukul Zoo Management System 2.1. The vulnerability is a SQL injection in the file /admin/manage-animals.php caused by unsafely handling the ID parameter, enabling remote exploitation. Multiple connected sources (CNVD, CNNVD, RH-CVE, CVE mirrors, PT-Security) describe it...

CVE-2025-7161

CVE-2025-7161 affects PHPGurukul Zoo Management System 2.1. The vulnerability resides in unknown code within the file /admin/add-normal-ticket.php, where manipulation of the cprice parameter enables SQL injection. The issue is exploitable remotely, and public disclosures exist. Impact is stated a...

CVE-2025-7160

CVE-2025-7160 affects PHPGurukul Zoo Management System 2.1, with SQL injection via the Username parameter in /admin/index.php. Exploitation is possible remotely and has public disclosure; multiple sources corroborate a high-severity issue stemming from unsanitized input. A patch is not publicly d...

CVE-2025-6930

CVE-2025-6930 affects PHPGurukul Zoo Management System 2.1. The vulnerability is a SQL injection in the file /admin/manage-foreigners-ticket.php triggered by manipulating the ID parameter. The issue is exploitable remotely and has public disclosure. Connected sources describe the affected file an...

CVE-2025-7162

CVE-2025-7162 concerns a SQL injection in PHPGurukul Zoo Management System 2.1, stemming from unsafely handling the cprice parameter in /admin/add-foreigners-ticket.php. Multiple connected sources (CNVD/CNNVD, Red Hat, CVE lists, and PT- Security notes) confirm a remote-exploit-capable vulnerabil...

CVE-2025-6929

CVE-2025-6929 affects PHPGurukul Zoo Management System 2.1. The vulnerability is a SQL injection in /admin/view-normal-ticket.php caused by manipulation of the viewid parameter. It can be exploited remotely and exploitation has been disclosed publicly. Multiple sources corroborate the flaw and ca...

CVE-2025-7163

PHPGurukul Zoo Management System 2.1 fixes: The vulnerability is an SQL injection in /admin/add-animals.php caused by unsafely handling the cnum parameter in an unknown function. Impact is remote exploitation with potential data disclosure or modification as described in multiple sources; exploit...

CVE-2025-9017

The CVE-2025-9017 issue affects PHPGurukul Zoo Management System 2.1, in the file /admin/add-foreigner-ticket.php where manipulation of the visitorname parameter enables cross-site scripting (XSS). The vulnerability is described as remotely initiable with public exploits disclosed, and affected e...