| タイトル | code-projects Simple Art Gallery in PHP 1 SQL Injection |
|---|
| 説明 | A high-risk SQL Injection vulnerability exists in the Simple Art Gallery in PHP with Source Code project, developed by Code-Projects.org. This vulnerability affects the adminHome.php endpoint, which allows authenticated users to update social media links. Due to improper handling of user input and direct SQL string concatenation, an attacker with a valid session can inject arbitrary SQL commands into the backend database.
Additionally, the application permits unauthenticated users to register accounts freely, allowing attackers to bypass access controls and gain administrative access without restrictions. Once logged in, the attacker can exploit the vulnerable endpoint to modify, extract, or destroy data. |
|---|
| ソース | ⚠️ https://github.com/yihaofuweng/cve/issues/5 |
|---|
| ユーザー | woziziiziz (UID 87194) |
|---|
| 送信 | 2025年06月28日 17:08 (1 年 ago) |
|---|
| モデレーション | 2025年07月06日 20:57 (8 days later) |
|---|
| ステータス | 重複 |
|---|
| VulDBエントリ | 223128 [Simple Art Gallery 1.0 adminHome.php social_facebook SQLインジェクション] |
|---|
| ポイント | 0 |
|---|