Vulnerabilities (CVE)

Filtered by vendor Phpgurukul Subscribe
Filtered by product Zoo Management System
Total 3 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-41615 1 Phpgurukul 1 Zoo Management System 2024-02-05 N/A 9.8 CRITICAL
Zoo Management System v1.0 was discovered to contain multiple SQL injection vulnerabilities in the Admin sign-in page via the username and password fields.
CVE-2023-41614 1 Phpgurukul 1 Zoo Management System 2024-02-05 N/A 4.8 MEDIUM
A stored cross-site scripting (XSS) vulnerability in the Add Animal Details function of Zoo Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Description of Animal parameter.
CVE-2022-1816 1 Phpgurukul 1 Zoo Management System 2024-02-04 3.5 LOW 5.4 MEDIUM
A vulnerability, which was classified as problematic, has been found in Zoo Management System 1.0. Affected by this issue is /zoo/admin/public_html/view_accounts?type=zookeeper of the content module. The manipulation of the argument admin_name with the input <script>alert(1)</script> leads to an authenticated cross site scripting. Exploit details have been disclosed to the public.