| 제목 | Simple Art Gallery In PHP 1 SQL Injection |
|---|
| 설명 | An authenticated SQL injection vulnerability exists in the Simple Art Gallery in PHP with Source Code project provided by Code-Projects.org. The vulnerability is located in the adminHome.php file and affects the social_linked POST parameter. Due to improper input handling and direct SQL concatenation, an attacker with a valid login session can inject arbitrary SQL statements into the backend database.
Moreover, the application allows unrestricted registration, enabling attackers to create an account freely and exploit this vulnerability without any prior authorization or admin approval. This flaw can be used to modify or corrupt backend data, extract sensitive information, or disrupt application logic. |
|---|
| 원천 | ⚠️ https://github.com/yihaofuweng/cve/issues/6 |
|---|
| 사용자 | woziziiziz (UID 87194) |
|---|
| 제출 | 2025. 06. 28. PM 05:17 (1 년도 ago) |
|---|
| 모더레이션 | 2025. 07. 06. PM 08:57 (8 days later) |
|---|
| 상태 | 중복 |
|---|
| VulDB 항목 | 223128 [Simple Art Gallery 1.0 adminHome.php social_facebook SQL 주입] |
|---|
| 포인트들 | 0 |
|---|