| Título | Simple Art Gallery In PHP 1 SQL Injection |
|---|
| Descrição | An authenticated SQL injection vulnerability exists in the Simple Art Gallery in PHP with Source Code project provided by Code-Projects.org. The vulnerability is located in the adminHome.php file and affects the social_linked POST parameter. Due to improper input handling and direct SQL concatenation, an attacker with a valid login session can inject arbitrary SQL statements into the backend database.
Moreover, the application allows unrestricted registration, enabling attackers to create an account freely and exploit this vulnerability without any prior authorization or admin approval. This flaw can be used to modify or corrupt backend data, extract sensitive information, or disrupt application logic. |
|---|
| Fonte | ⚠️ https://github.com/yihaofuweng/cve/issues/6 |
|---|
| Utilizador | woziziiziz (UID 87194) |
|---|
| Submissão | 28/06/2025 17h17 (há 1 Ano) |
|---|
| Moderação | 06/07/2025 20h57 (8 days later) |
|---|
| Estado | Duplicado |
|---|
| Entrada VulDB | 223128 [Simple Art Gallery 1.0 adminHome.php social_facebook Injeção SQL] |
|---|
| Pontos | 0 |
|---|