SQL Injection vulnerability in /zms/admin/changeimage.php in PHPGurukul Zoo Management System 1.0 allows malicious users to run arbitrary SQL commands via the editid parameter.