cbcvebase.
CVE-2024-25351
published 2024-02-28

CVE-2024-25351: SQL Injection vulnerability in /zms/admin/changeimage.php in PHPGurukul Zoo Management System 1.0 allows attackers to run arbitrary SQL commands via the editid…

PriorityP423low3.8CVSS 3.1
AVNACLPRHUINSUCLILAN
EPSS
0.39%
31.3th percentile
SQL Injection vulnerability in /zms/admin/changeimage.php in PHPGurukul Zoo Management System 1.0 allows attackers to run arbitrary SQL commands via the editid parameter.

Affected

1 ranges
VendorProductVersion rangeFixed in
phpgurukulzoo_management_system——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.