Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2022-31897 — Zoo Management System 1.0 - Reflected Cross-Site-Scripting (XSS) | Kitploit
Tools/GitHubGitHub/angelopioamirante/cve-2022-31897
Vulnerability AnalysisExploitationWeb Application ExploitationWeb SecurityPenetration Testing
GitHubangelopioamirante/cve-2022-31897

CVE-2022-31897

Zoo Management System 1.0 - Reflected Cross-Site-Scripting (XSS)

View Repository
4 years agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2022-31897

Date: 06/22/2022

Exploit Author: Angelo Pio Amirante

Vendor Homepage: https://www.sourcecodester.com/

Software Link: https://www.sourcecodester.com/php/15344/zoo-management-system-phpoop-free-source-code.html

Version: 1.0

Tested on: Server: XAMPP on Windows 10

CVE: CVE-2022-31897

Description:

Zoo Management System 1.0 is vulnerable to reflected cross-site scripting on the sign-up page. The "msg" parameter in 'http://localhost/public_html/register_visitor?msg=' is vulnerable.

Impact:

An attacker could steal cookies with a crafted URL sent to the victims.

Exploit:

Visit the following page:

  1. http://localhost/public_html/register_visitor?msg=

  2. Alert pop up is fired!

Image poc:

  • Registration page
  • XSS
Download Tool