cbcvebase.
CVE-2024-25351
published 2024-02-28

CVE-2024-25351: SQL Injection vulnerability in /zms/admin/changeimage.php in PHPGurukul Zoo Management System 1.0 allows attackers to run arbitrary SQL commands via the editid…

low3.8CVSS 3.1
AVNACLPRHUINSUCLILAN
SQL Injection vulnerability in /zms/admin/changeimage.php in PHPGurukul Zoo Management System 1.0 allows attackers to run arbitrary SQL commands via the editid parameter.

Affected

1 ranges
VendorProductVersion rangeFixed in
phpgurukulzoo_management_system