Total
3 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2023-41615 | 1 Phpgurukul | 1 Zoo Management System | 2024-02-05 | N/A | 9.8 CRITICAL |
Zoo Management System v1.0 was discovered to contain multiple SQL injection vulnerabilities in the Admin sign-in page via the username and password fields. | |||||
CVE-2023-41614 | 1 Phpgurukul | 1 Zoo Management System | 2024-02-05 | N/A | 4.8 MEDIUM |
A stored cross-site scripting (XSS) vulnerability in the Add Animal Details function of Zoo Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Description of Animal parameter. | |||||
CVE-2022-1816 | 1 Phpgurukul | 1 Zoo Management System | 2024-02-04 | 3.5 LOW | 5.4 MEDIUM |
A vulnerability, which was classified as problematic, has been found in Zoo Management System 1.0. Affected by this issue is /zoo/admin/public_html/view_accounts?type=zookeeper of the content module. The manipulation of the argument admin_name with the input <script>alert(1)</script> leads to an authenticated cross site scripting. Exploit details have been disclosed to the public. |