Which versions of Zoo Management System are affected by CVE-2025-7163?

CVE-2025-7163 presents moderate security risk, a injection vulnerability rated CVSS 6.3. Exploitation could allow attackers to execute code or inject malicious input.

Is there a public PoC exploit available for CVE-2025-7163?

Yes, a public proof-of-concept exploit is available for CVE-2025-7163. Prioritise patching immediately. EPSS: 0.1%.

How to fix or mitigate CVE-2025-7163?

Within 30 days: Identify affected systems and apply vendor patches as part of regular patch cycle. Validate input sanitization for user-controlled parameters.

Zoo Management System CVE-2025-7163

Q: What is the CVSS score of CVE-2025-7163?

CVE-2025-7163 has a CVSS 4.0 base score of 2.1 (Low). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.1%.

EUVD-2025-20391 LOW

Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') (CWE-74)

2025-07-08 cna@vuldb.com

PHP SQLi Zoo Management System Phpgurukul

2.1

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

2.1 LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

vuln.today AI

6.3 MEDIUM

Network attack with low complexity, low privileges required; SQL injection yields limited data exposure and modification.

3.1 AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

4.0 AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

Primary rating from NVD.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Severity Changed

Apr 29, 2026 - 01:11 NVD

MEDIUM LOW

CVSS changed

Apr 29, 2026 - 01:11 NVD

6.3 (MEDIUM) 2.1 (LOW)

EUVD ID Assigned

Mar 16, 2026 - 04:21 euvd

EUVD-2025-20391

Analysis Generated

Mar 16, 2026 - 04:21 vuln.today

PoC Detected

Jul 09, 2025 - 13:51 vuln.today

Public exploit code

CVE Published

Jul 08, 2025 - 05:15 nvd

MEDIUM 6.3

CVE Published

Jul 08, 2025 - 05:15 cve.org

LOW 2.1

DescriptionCVE.org

A vulnerability, which was classified as critical, was found in PHPGurukul Zoo Management System 2.1. Affected is an unknown function of the file /admin/add-animals.php. The manipulation of the argument cnum leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

AnalysisAI

SQL injection in PHPGurukul Zoo Management System 2.1 allows authenticated remote attackers to manipulate the 'cnum' parameter in /admin/add-animals.php, leading to unauthorized database access or data modification. Public exploit code exists but no active exploitation has been confirmed; EPSS score is low at 0.06%.

Technical ContextAI

The vulnerability lies in a PHP-based web application handling animal records, where user-supplied input to the 'cnum' parameter is not properly sanitized before being used in a SQL query. The root cause class is Injection (CWE-74), typical of SQL injection flaws in dynamic database interactions. The affected product is PHPGurukul Zoo Management System version 2.1, as identified by CPE cpe:2.3:a:phpgurukul:zoo_management_system:2.1.

RemediationAI

No vendor-released patch is identified at the time of analysis. As an immediate workaround, restrict network access to the /admin/ directory (e.g., via IP whitelisting or firewall rules) to minimize exposure. Alternatively, disable the add-animals.php functionality if not essential, but this may impair application usability. Apply input validation or parameterized queries to the 'cnum' parameter in the application code to eliminate the SQL injection risk. Monitor vendor communication at https://phpgurukul.com/ for an official fix.