Description
A vulnerability classified as critical has been found in PHPGurukul Zoo Management System 2.1. This affects an unknown part of the file /admin/index.php. The manipulation of the argument Username leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| PHPGurukul | Zoo Management System | 2.1 | — |
Automated scanner template
A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.
- Zoo Management System 1.0 - SQL Injection http/cves/2025/CVE-2025-7160.yaml
Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.
References
- VDB-315099 | PHPGurukul Zoo Management System index.php sql injection vdb-entry technical-description
- VDB-315099 | CTI Indicators (IOB, IOC, TTP, IOA) signature permissions-required
- Submit #606367 | PHPGurukul Zoo Management System 2.1 SQL Injection third-party-advisory
- https://github.com/f1rstb100d/myCVE/issues/103 exploit issue-tracking
- https://phpgurukul.com/ product