Zoo Management System

zoo_management_system

Vendor: Phpgurukul • 37 CVEs

CVEs (37)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2024-25351 1Phpgurukul 1Zoo Management System Mar 27, 2025 Feb 28, 2024 N/A· v4 3.8 LOW· v3 N/A· v2 SQL Injection vulnerability in /zms/admin/changeimage.php in PHPGurukul Zoo Management System 1.0 allows attackers to run arbitrary SQL commands via the editid parameter.
CVE-2024-25350 1Phpgurukul 1Zoo Management System Mar 27, 2025 Feb 28, 2024 N/A· v4 9.8 CRITICAL· v3 N/A· v2 SQL Injection vulnerability in /zms/admin/edit-ticket.php in PHPGurukul Zoo Management System 1.0 via tickettype and tprice parameters.
CVE-2023-41614 1Phpgurukul 1Zoo Management System Jun 17, 2026 Sep 21, 2023 N/A· v4 4.8 MEDIUM· v3 N/A· v2 A stored cross-site scripting (XSS) vulnerability in the Add Animal Details function of Zoo Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Descrip...Show more A stored cross-site scripting (XSS) vulnerability in the Add Animal Details function of Zoo Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Description of Animal parameter.Show less
CVE-2023-41615 1Phpgurukul 1Zoo Management System Jun 17, 2026 Sep 8, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Zoo Management System v1.0 was discovered to contain multiple SQL injection vulnerabilities in the Admin sign-in page via the username and password fields.
CVE-2022-40925 1Phpgurukul 1Zoo Management System Jun 17, 2026 Sep 26, 2022 N/A· v4 7.2 HIGH· v3 N/A· v2 Zoo Management System v1.0 has an arbitrary file upload vulnerability in the picture upload point of the "save_event" file of the "Events" module in the background management system.
CVE-2022-40924 1Phpgurukul 1Zoo Management System Jun 17, 2026 Sep 26, 2022 N/A· v4 7.2 HIGH· v3 N/A· v2 Zoo Management System v1.0 has an arbitrary file upload vulnerability in the picture upload point of the "save_animal" file of the "Animals" module in the background management system.
CVE-2022-40932 1Phpgurukul 1Zoo Management System Jun 17, 2026 Sep 22, 2022 N/A· v4 7.2 HIGH· v3 N/A· v2 In Zoo Management System v1.0, there is an arbitrary file upload vulnerability in the picture upload point of the "gallery" file of the "Gallery" module in the background management system.
CVE-2022-2804 1Phpgurukul 1Zoo Management System Jun 17, 2026 Aug 12, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 A vulnerability was found in SourceCodester Zoo Management System. It has been classified as critical. Affected is an unknown function of the file /pages/apply_vacancy.php. The manipulation of the argument filename leads...Show more A vulnerability was found in SourceCodester Zoo Management System. It has been classified as critical. Affected is an unknown function of the file /pages/apply_vacancy.php. The manipulation of the argument filename leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-206250 is the identifier assigned to this vulnerability.Show less
CVE-2022-2803 1Phpgurukul 1Zoo Management System Jun 17, 2026 Aug 12, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 A vulnerability was found in SourceCodester Zoo Management System and classified as critical. This issue affects some unknown processing of the file /pages/animals.php. The manipulation of the argument class_id leads to...Show more A vulnerability was found in SourceCodester Zoo Management System and classified as critical. This issue affects some unknown processing of the file /pages/animals.php. The manipulation of the argument class_id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-206249 was assigned to this vulnerability.Show less
CVE-2022-33075 1Phpgurukul 1Zoo Management System Jun 17, 2026 Jul 5, 2022 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 A stored cross-site scripting (XSS) vulnerability in the Add Classification function of Zoo Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via unspecified vectors.
CVE-2022-31897 1Phpgurukul 1Zoo Management System Jun 17, 2026 Jun 29, 2022 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 SourceCodester Zoo Management System 1.0 is vulnerable to Cross Site Scripting (XSS) via public_html/register_visitor?msg=.
CVE-2022-31914 1Phpgurukul 1Zoo Management System Jun 17, 2026 Jun 16, 2022 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 Zoo Management System v1.0 is vulnerable to Cross Site Scripting (XSS) via zms/admin/public_html/save_animal?an_id=24.
CVE-2021-4232 1Phpgurukul 1Zoo Management System Jun 17, 2026 May 26, 2022 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 A vulnerability classified as problematic has been found in Zoo Management System 1.0. Affected is an unknown function of the file admin/manage-ticket.php. The manipulation with the input <script>alert(1)</script> leads...Show more A vulnerability classified as problematic has been found in Zoo Management System 1.0. Affected is an unknown function of the file admin/manage-ticket.php. The manipulation with the input <script>alert(1)</script> leads to cross site scripting. It is possible to launch the attack remotely.Show less
CVE-2022-1816 1Phpgurukul 1Zoo Management System Jun 17, 2026 May 23, 2022 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 A vulnerability, which was classified as problematic, has been found in Zoo Management System 1.0. Affected by this issue is /zoo/admin/public_html/view_accounts?type=zookeeper of the content module. The manipulation of...Show more A vulnerability, which was classified as problematic, has been found in Zoo Management System 1.0. Affected by this issue is /zoo/admin/public_html/view_accounts?type=zookeeper of the content module. The manipulation of the argument admin_name with the input <script>alert(1)</script> leads to an authenticated cross site scripting. Exploit details have been disclosed to the public.Show less
CVE-2022-27992 1Phpgurukul 1Zoo Management System Jun 17, 2026 Apr 8, 2022 N/A· v4 8.8 HIGH· v3 6.5 MEDIUM· v2 Zoo Management System v1.0 was discovered to contain a SQL injection vulnerability at /public_html/animals via the class_id parameter.
CVE-2022-27351 1Phpgurukul 1Zoo Management System Jun 17, 2026 Apr 8, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Zoo Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via /public_html/apply_vacancy. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file.
CVE-2020-25487 1Phpgurukul 1Zoo Management System Jun 17, 2026 Sep 22, 2020 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 PHPGURUKUL Zoo Management System Using PHP and MySQL version 1.0 is affected by: SQL Injection via zms/animal-detail.php.

Previous 12