Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2022-33075 — Zoo Management System 1.0 - Stored Cross-Site-Scripting (XSS) | Kitploit
Tools/GitHubGitHub/angelopioamirante/cve-2022-33075
Vulnerability AnalysisExploitationWeb Application ExploitationWeb SecurityPenetration Testing
GitHubangelopioamirante/cve-2022-33075

CVE-2022-33075

Zoo Management System 1.0 - Stored Cross-Site-Scripting (XSS)

View Repository
4 years agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2022-33075

Exploit Title: Zoo Management System 1.0 - Stored Cross-Site-Scripting (XSS)

Date: 05/26/2022

Exploit Author: Angelo Pio Amirante

Vendor Homepage: https://www.sourcecodester.com/

Software Link: https://www.sourcecodester.com/php/15344/zoo-management-system-phpoop-free-source-code.html

Version: 1.0

Tested on: Server: XAMPP

CVE: 2022-33075

Description:

Zoo Management System 1.0 is vulnerable to a stored cross site scripting in “Add Classification” functionality of the admin panel.

Exploit:

  1. Goto: http://localhost/admin/public_html/admin_login and login with the provided credentials
  2. Goto: http://localhost/admin/public_html/save_classification
  3. The “Classification Display Name” and “Classification Table Name” are both vulnerable so you can put in one of them
  4. Goto: http://localhost/admin/public_html/view_classifications
  5. Stored XSS payload is fired

Image Poc:

  • XSS Payload
  • XSS alert
Download Tool