CVE-2022-1816

low-risk
Published 2022-05-23

A vulnerability, which was classified as problematic, has been found in Zoo Management System 1.0. Affected by this issue is /zoo/admin/public_html/view_accounts?type=zookeeper of the content module. The manipulation of the argument admin_name with the input <script>alert(1)</script> leads to an authenticated cross site scripting. Exploit details have been disclosed to the public.

Do I need to act?

-
0.25% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
3
CVSS 3.5/10 Low
NETWORK / LOW complexity

Affected Products (1)

Affected Vendors

Phpgurukul

References (4)

Broken Link https://github.com/Xor-Gerke/webray.com.cn/blob/main/cve/Zoo-Management-System/Z...
Third Party Advisory https://vuldb.com/?id.200558
Broken Link https://github.com/Xor-Gerke/webray.com.cn/blob/main/cve/Zoo-Management-System/Z...
Third Party Advisory https://vuldb.com/?id.200558
22
/ 100
low-risk
Severity 16/34 · Moderate
Exploitability 1/34 · Minimal
Exposure 5/34 · Minimal