CVE-2022-40925

Zoo Management System v1.0 has an arbitrary file upload vulnerability in the picture upload point of the "save_event" file of the "Events" module in the background management system.

Score

CVSS 3.1 7.2 High

Status

Modified - cve@mitre.org

Published

2022-09-26

Last modified

2025-05-21

Weaknesses

CWE-434

Affected products

• Zoo Management System (Phpgurukul)

References

• https://github.com/admin77888/Bug_report/blob/main/vendors/pushpam02/zoo-management-system/RCE-2.md