CVE-2020-25487
published 2020-09-22CVE-2020-25487: PHPGURUKUL Zoo Management System Using PHP and MySQL version 1.0 is affected by: SQL Injection via zms/animal-detail.php.
PriorityP339high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
EPSS
0.51%
40.1th percentile
PHPGURUKUL Zoo Management System Using PHP and MySQL version 1.0 is affected by: SQL Injection via zms/animal-detail.php.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| phpgurukul | zoo_management_system | — | — |
CVSS provenance
nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvdv2.04.6MEDIUMAV:L/AC:L/Au:N/C:P/I:P/A:P
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
PHPGurukul Zoo Management System 1.0 zms/animal-detail.php sql injection
vuldb·2026-07-05·CVSS 7.8
CVE-2020-25487 [HIGH] PHPGurukul Zoo Management System 1.0 zms/animal-detail.php sql injection
A vulnerability labeled as critical has been found in PHPGurukul Zoo Management System 1.0. This affects an unknown part of the file zms/animal-detail.php. The manipulation results in sql injection.
This vulnerability is cataloged as CVE-2020-25487. The attack may be launched remotely. There is no exploit available.
GHSA
GHSA-cj8c-4h22-g2gj: PHPGURUKUL Zoo Management System Using PHP and MySQL version 1
ghsa_unreviewed·2022-05-24
CVE-2020-25487 [HIGH] CWE-89 GHSA-cj8c-4h22-g2gj: PHPGURUKUL Zoo Management System Using PHP and MySQL version 1
PHPGURUKUL Zoo Management System Using PHP and MySQL version 1.0 is affected by: SQL Injection via zms/animal-detail.php.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2020-09-22
Published