PT-2025-29102 · Sourcecodester · Zoo Management System

Manyufan · Published 2025-07-10 · Updated 2025-07-10 · CVE-2025-7408

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions: SourceCodester Zoo Management System version 1.0

Description: A problematic issue has been identified in the software. The manipulation of the msg argument leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public.

Recommendations: As a temporary workaround, consider restricting or sanitizing the msg argument in the /admin/templates/animal form template.php file until a patch is available.

Exploit

Fix

XSS

Code Injection

Weakness Enumeration

CWE-79

CWE-94

Related Identifiers

CVE-2025-7408

Affected Products

Zoo Management System

References · 9

• 🔥 https://github.com/manyufann/CVE/issues/4 · Exploit
• https://osv.dev/vulnerability/CVE-2025-7408 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-7408 · Security Note
• https://twitter.com/CVEnew/status/1943335869844250737 · Twitter Post
• https://vuldb.com/?submit.608265 · Note
• https://vuldb.com/?id.315868 · Note
• https://vuldb.com/?ctiid.315868 · Note
• https://sourcecodester.com · Note
• https://twitter.com/VulmonFeeds/status/1943361632408596863 · Twitter Post