CVE-2022-40932 — Unrestricted File Upload in ZOO Management System

CWE-434 — Unrestricted File Upload3 documents3 sources
Severity
7.2HIGHNVD
EPSS
0.4%
top 36.34%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Phpgurukul ZOO Management System
Timeline
PublishedSep 22
Latest updateSep 23

Description

In Zoo Management System v1.0, there is an arbitrary file upload vulnerability in the picture upload point of the "gallery" file of the "Gallery" module in the background management system.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HExploitability: 1.2 | Impact: 5.9

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-8hwf-7cch-jr9v: In Zoo Management System v1↗2022-09-23
▶
CVEList
CVE-2022-40932: In Zoo Management System v1↗2022-09-22
▶
CVE-2022-40932 — Unrestricted File Upload | cvebase