CVE-2022-2804

Published: Aug 12, 2022Modified: Jun 17, 2026

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

A vulnerability was found in SourceCodester Zoo Management System. It has been classified as critical. Affected is an unknown function of the file /pages/apply_vacancy.php. The manipulation of the argument filename leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-206250 is the identifier assigned to this vulnerability.

Affected (1)

Products: Phpgurukul: Zoo Management System

1 product

Zoo Management System

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Phpgurukul Zoo Management System	All versions

Related CWEs

Unrestricted Upload of File with Dangerous Type

The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.

References (4)

https://s1.ax1x.com/2022/08/12/vJ5pEd.png

Source: cna@vuldb.com

ExploitThird Party Advisory

https://vuldb.com/?id.206250

Source: cna@vuldb.com

Third Party AdvisoryVDB Entry

https://s1.ax1x.com/2022/08/12/vJ5pEd.png

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

https://vuldb.com/?id.206250

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

Timeline

No history available yet.