| タイトル | Simple Art Gallery In PHP 1 SQL Injection |
|---|
| 説明 | An authenticated SQL injection vulnerability exists in the Simple Art Gallery in PHP with Source Code project provided by Code-Projects.org. The vulnerability is located in the adminHome.php file and affects the social_linked POST parameter. Due to improper input handling and direct SQL concatenation, an attacker with a valid login session can inject arbitrary SQL statements into the backend database.
Moreover, the application allows unrestricted registration, enabling attackers to create an account freely and exploit this vulnerability without any prior authorization or admin approval. This flaw can be used to modify or corrupt backend data, extract sensitive information, or disrupt application logic. |
|---|
| ソース | ⚠️ https://github.com/yihaofuweng/cve/issues/6 |
|---|
| ユーザー | woziziiziz (UID 87194) |
|---|
| 送信 | 2025年06月28日 17:17 (1 年 ago) |
|---|
| モデレーション | 2025年07月06日 20:57 (8 days later) |
|---|
| ステータス | 重複 |
|---|
| VulDBエントリ | 223128 [Simple Art Gallery 1.0 adminHome.php social_facebook SQLインジェクション] |
|---|
| ポイント | 0 |
|---|