| عنوان | Simple Art Gallery In PHP 1 SQL Injection |
|---|
| الوصف | An authenticated SQL injection vulnerability exists in the Simple Art Gallery in PHP with Source Code project provided by Code-Projects.org. The vulnerability is located in the adminHome.php file and affects the social_linked POST parameter. Due to improper input handling and direct SQL concatenation, an attacker with a valid login session can inject arbitrary SQL statements into the backend database.
Moreover, the application allows unrestricted registration, enabling attackers to create an account freely and exploit this vulnerability without any prior authorization or admin approval. This flaw can be used to modify or corrupt backend data, extract sensitive information, or disrupt application logic. |
|---|
| المصدر | ⚠️ https://github.com/yihaofuweng/cve/issues/6 |
|---|
| المستخدم | woziziiziz (UID 87194) |
|---|
| ارسال | 28/06/2025 05:17 PM (1 سنة منذ) |
|---|
| الاعتدال | 06/07/2025 08:57 PM (8 days later) |
|---|
| الحالة | مكرر |
|---|
| إدخال VulDB | 223128 [Simple Art Gallery 1.0 adminHome.php social_facebook حقن SQL] |
|---|
| النقاط | 0 |
|---|