| Название | code-projects Simple Art Gallery in PHP 1 sql |
|---|
| Описание | A high-risk SQL Injection vulnerability exists in the Simple Art Gallery in PHP with Source Code project, developed by Code-Projects.org. This vulnerability affects the adminHome.php endpoint, which allows authenticated users to update social media links. Due to improper handling of user input and direct SQL string concatenation, an attacker with a valid session can inject arbitrary SQL commands into the backend database.
Additionally, the application permits unauthenticated users to register accounts freely, allowing attackers to bypass access controls and gain administrative access without restrictions. Once logged in, the attacker can exploit the vulnerable endpoint to modify, extract, or destroy data. |
|---|
| Источник | ⚠️ https://github.com/yihaofuweng/cve/issues/4 |
|---|
| Пользователь | woziziiziz (UID 87194) |
|---|
| Представление | 28.06.2025 16:58 (1 Год назад) |
|---|
| Модерация | 06.07.2025 20:56 (8 days later) |
|---|
| Статус | Дубликат |
|---|
| Запись VulDB | 223399 [code-projects Simple Art Gallery 1.0 adminHome.php reach_city SQL-инъекция] |
|---|
| Баллы | 0 |
|---|