Zoo Management System Security Vulnerabilities and Issues — Zoo Management System CVE List

Lucene search

PhpgurukulZoo Management System

12 matches found

cve•added 2022/04/08 9:15 a.m.•69 views

CVE-2022-27351

Zoo Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via /public_html/apply_vacancy. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file.

9.8CVSS9.7AI score0.02758EPSS

cve•added 2022/04/08 9:15 a.m.•66 views

CVE-2022-27992

Zoo Management System v1.0 was discovered to contain a SQL injection vulnerability at /public_html/animals via the class_id parameter.

8.8CVSS8.9AI score0.003EPSS

cve•added 2022/06/29 1:15 a.m.•57 views

CVE-2022-31897

SourceCodester Zoo Management System 1.0 is vulnerable to Cross Site Scripting (XSS) via public_html/register_visitor?msg=.

6.1CVSS5.9AI score0.01399EPSS

cve•added 2022/05/23 12:16 p.m.•55 views

CVE-2022-1816

A vulnerability, which was classified as problematic, has been found in Zoo Management System 1.0. Affected by this issue is /zoo/admin/public_html/view_accounts?type=zookeeper of the content module. The manipulation of the argument admin_name with the input leads to an authenticated cross site sc...

5.4CVSS4.4AI score0.00194EPSS

cve•added 2022/09/26 1:15 p.m.•53 views

CVE-2022-40925

Zoo Management System v1.0 has an arbitrary file upload vulnerability in the picture upload point of the "save_event" file of the "Events" module in the background management system.

7.2CVSS7AI score0.001EPSS

cve•added 2022/06/16 4:15 p.m.•52 views

CVE-2022-31914

Zoo Management System v1.0 is vulnerable to Cross Site Scripting (XSS) via zms/admin/public_html/save_animal?an_id=24.

5.4CVSS5.2AI score0.00195EPSS

cve•added 2022/07/05 6:15 p.m.•52 views

CVE-2022-33075

A stored cross-site scripting (XSS) vulnerability in the Add Classification function of Zoo Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via unspecified vectors.

5.4CVSS5.2AI score0.00178EPSS

cve•added 2022/08/12 8:15 p.m.•48 views

CVE-2022-2803

A vulnerability was found in SourceCodester Zoo Management System and classified as critical. This issue affects some unknown processing of the file /pages/animals.php. The manipulation of the argument class_id leads to sql injection. The attack may be initiated remotely. The exploit has been discl...

9.8CVSS8.3AI score0.00056EPSS

cve•added 2022/08/12 8:15 p.m.•42 views

CVE-2022-2804

A vulnerability was found in SourceCodester Zoo Management System. It has been classified as critical. Affected is an unknown function of the file /pages/apply_vacancy.php. The manipulation of the argument filename leads to unrestricted upload. It is possible to launch the attack remotely. The expl...

9.8CVSS8.1AI score0.00096EPSS

cve•added 2022/09/26 1:15 p.m.•42 views

CVE-2022-40924

Zoo Management System v1.0 has an arbitrary file upload vulnerability in the picture upload point of the "save_animal" file of the "Animals" module in the background management system.

7.2CVSS7AI score0.001EPSS

cve•added 2022/09/22 4:15 p.m.•35 views

CVE-2022-40932

In Zoo Management System v1.0, there is an arbitrary file upload vulnerability in the picture upload point of the "gallery" file of the "Gallery" module in the background management system.

7.2CVSS7AI score0.001EPSS

cve•added 2022/05/26 5:15 p.m.•30 views

CVE-2021-4232

A vulnerability classified as problematic has been found in Zoo Management System 1.0. Affected is an unknown function of the file admin/manage-ticket.php. The manipulation with the input leads to cross site scripting. It is possible to launch the attack remotely.

6.1CVSS4.8AI score0.00207EPSS