| Título | code-projects Simple Art Gallery in PHP 1 SQL Injection |
|---|
| Descrição | A high-risk SQL Injection vulnerability exists in the Simple Art Gallery in PHP with Source Code project, developed by Code-Projects.org. This vulnerability affects the adminHome.php endpoint, which allows authenticated users to update social media links. Due to improper handling of user input and direct SQL string concatenation, an attacker with a valid session can inject arbitrary SQL commands into the backend database.
Additionally, the application permits unauthenticated users to register accounts freely, allowing attackers to bypass access controls and gain administrative access without restrictions. Once logged in, the attacker can exploit the vulnerable endpoint to modify, extract, or destroy data. |
|---|
| Fonte | ⚠️ https://github.com/yihaofuweng/cve/issues/5 |
|---|
| Utilizador | woziziiziz (UID 87194) |
|---|
| Submissão | 28/06/2025 17h08 (há 1 Ano) |
|---|
| Moderação | 06/07/2025 20h57 (8 days later) |
|---|
| Estado | Duplicado |
|---|
| Entrada VulDB | 223128 [Simple Art Gallery 1.0 adminHome.php social_facebook Injeção SQL] |
|---|
| Pontos | 0 |
|---|