{"uuid": "934e17bc-cfc9-43ba-8814-ccf2ffdf74dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31897", "type": "seen", "source": "https://t.me/hacking_Attack/58348", "content": "Exploit Collector\nZoo Management System 1.0 Cross Site Scripting\n\nhttps://1.bp.blogspot.com/-ju6c7E-5MWk/WWlvdc1QT-I/AAAAAAAAIPk/ByEXv5vo16UsrlpTJMmF2Op4hfJEgrRpQCLcBGAs/s1600/h79.png \nZoo Management System version 1.0 suffers from a cross site scripting vulnerability.\n\nSHA-256 | c2c4aa85cb3df00f1fddb60ea24a09058f2a8faf14d274c3e8673a5ae5d6286f\n\nDownload\n# Exploit Title: Zoo Management System 1.0 - Reflected Cross-Site-Scripting (XSS)\n# Date: 06/22/2022\n# Exploit Author: Angelo Pio Amirante\n# Vendor Homepage: https://www.sourcecodester.com/\n# Software Link: https://www.sourcecodester.com/php/15344/zoo-management-system-phpoop-free-source-code.html\n# Version: 1.0\n# Tested on: Server: XAMPP on Windows 10 \n# CVE: CVE-2022-31897\n\n# Description:\nZoo Management System 1.0 is vulnerable to reflected cross-site scripting on the sign-up page. The \"msg\" parameter in 'http://localhost/public_html/register_visitor?msg=' is vulnerable.\n\n# Impact:\nAn attacker could steal cookies with a crafted URL sent to the victims.\n\n# Exploit:\n\nVisit the following page: \n\n1) http://localhost/public_html/register_visitor?msg=\n\n2) Alert pop up is fired!\n# Image poc:\n\nhttps://ibb.co/8XKDgJX -> Registration page\nhttps://ibb.co/mTTmTmy -> XSS\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:01:35.637227Z"}