| 标题 | code-projects Simple Art Gallery 1 SQL Injection |
|---|
| 描述 | An authenticated SQL injection vulnerability exists in the Simple Art Gallery in PHP with Source Code project provided by Code-Projects.org. The vulnerability is located in the adminHome.php file and affects the social_linked POST parameter. Due to improper input handling and direct SQL concatenation, an attacker with a valid login session can inject arbitrary SQL statements into the backend database.
Moreover, the application allows unrestricted registration, enabling attackers to create an account freely and exploit this vulnerability without any prior authorization or admin approval. This flaw can be used to modify or corrupt backend data, extract sensitive information, or disrupt application logic. |
|---|
| 来源 | ⚠️ https://github.com/manbo001/CVE/issues/1 |
|---|
| 用户 | touchnc (UID 87201) |
|---|
| 提交 | 2025-06-28 17時27分 (1 年前) |
|---|
| 管理 | 2025-07-06 20時57分 (8 days later) |
|---|
| 状态 | 重复 |
|---|
| VulDB条目 | 223128 [Simple Art Gallery 1.0 adminHome.php social_facebook SQL注入] |
|---|
| 积分 | 0 |
|---|