First published: Mon Sep 26 2022(Updated: )
Zoo Management System v1.0 has an arbitrary file upload vulnerability in the picture upload point of the "save_animal" file of the "Animals" module in the background management system.
Credit: cve@mitre.org cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Zoo Management System Project Zoo Management System | =1.0 | |
PHPGURUKUL Zoo Management System | =1.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2022-40924 is an arbitrary file upload vulnerability in the picture upload point of the "save_animal" file of the "Animals" module in Zoo Management System v1.0.
The severity of CVE-2022-40924 is high, with a CVSS severity score of 7.2.
CVE-2022-40924 affects Zoo Management System v1.0 by allowing arbitrary file uploads in the picture upload point of the "save_animal" file of the "Animals" module in the background management system.
To fix CVE-2022-40924, it is recommended to apply the latest patches or updates provided by the Zoo Management System Project.
You can find more information about CVE-2022-40924 at the following reference link: [link](https://github.com/admin77888/Bug_report/blob/main/vendors/pushpam02/zoo-management-system/RCE-1.md).