| tiêu đề | code-projects Simple Art Gallery in PHP 1 sql |
|---|
| Mô tả | A high-risk SQL Injection vulnerability exists in the Simple Art Gallery in PHP with Source Code project, developed by Code-Projects.org. This vulnerability affects the adminHome.php endpoint, which allows authenticated users to update social media links. Due to improper handling of user input and direct SQL string concatenation, an attacker with a valid session can inject arbitrary SQL commands into the backend database.
Additionally, the application permits unauthenticated users to register accounts freely, allowing attackers to bypass access controls and gain administrative access without restrictions. Once logged in, the attacker can exploit the vulnerable endpoint to modify, extract, or destroy data. |
|---|
| Nguồn | ⚠️ https://github.com/yihaofuweng/cve/issues/4 |
|---|
| Người dùng | woziziiziz (UID 87194) |
|---|
| Đệ trình | 28/06/2025 16:58 (cách đây 1 Năm) |
|---|
| Kiểm duyệt | 06/07/2025 20:56 (8 days later) |
|---|
| Trạng thái | Bản sao |
|---|
| Mục VulDB | 223399 [code-projects Simple Art Gallery 1.0 adminHome.php reach_city Tiêm SQL] |
|---|
| điểm | 0 |
|---|