| 标题 | code-projects Simple Art Gallery in PHP 1 sql |
|---|
| 描述 | A high-risk SQL Injection vulnerability exists in the Simple Art Gallery in PHP with Source Code project, developed by Code-Projects.org. This vulnerability affects the adminHome.php endpoint, which allows authenticated users to update social media links. Due to improper handling of user input and direct SQL string concatenation, an attacker with a valid session can inject arbitrary SQL commands into the backend database.
Additionally, the application permits unauthenticated users to register accounts freely, allowing attackers to bypass access controls and gain administrative access without restrictions. Once logged in, the attacker can exploit the vulnerable endpoint to modify, extract, or destroy data. |
|---|
| 来源 | ⚠️ https://github.com/yihaofuweng/cve/issues/4 |
|---|
| 用户 | woziziiziz (UID 87194) |
|---|
| 提交 | 2025-06-28 16時58分 (1 年前) |
|---|
| 管理 | 2025-07-06 20時56分 (8 days later) |
|---|
| 状态 | 重复 |
|---|
| VulDB条目 | 223399 [code-projects Simple Art Gallery 1.0 adminHome.php reach_city SQL注入] |
|---|
| 积分 | 0 |
|---|