A vulnerability, which was classified as critical, has been found in PHPGurukul Art Gallery Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/edit-artist-detail.php?editid=1. The manipulation of the argument Name leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
References
Link | Resource |
---|---|
https://github.com/liuhao2638/cve/issues/2 | Exploit Issue Tracking Third Party Advisory |
https://github.com/liuhao2638/cve/issues/2 | Exploit Issue Tracking Third Party Advisory |
https://phpgurukul.com/ | Product |
https://vuldb.com/?ctiid.300656 | Permissions Required VDB Entry |
https://vuldb.com/?id.300656 | VDB Entry Third Party Advisory |
https://vuldb.com/?submit.519768 | Third Party Advisory VDB Entry |
Configurations
History
02 Apr 2025, 14:32
Type | Values Removed | Values Added |
---|---|---|
CPE | cpe:2.3:a:phpgurukul:art_gallery_management_system:1.0:*:*:*:*:*:*:* | |
CWE | CWE-89 | |
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.8 |
First Time |
Phpgurukul art Gallery Management System
Phpgurukul |
|
References | () https://phpgurukul.com/ - Product | |
References | () https://github.com/liuhao2638/cve/issues/2 - Exploit, Issue Tracking, Third Party Advisory | |
References | () https://vuldb.com/?ctiid.300656 - Permissions Required, VDB Entry | |
References | () https://vuldb.com/?submit.519768 - Third Party Advisory, VDB Entry | |
References | () https://vuldb.com/?id.300656 - VDB Entry, Third Party Advisory |
24 Mar 2025, 13:15
Type | Values Removed | Values Added |
---|---|---|
CVSS |
v2 : v3 : |
v2 : unknown
v3 : unknown |
CWE | CWE-74 |
23 Mar 2025, 05:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2025-03-23 05:15
Updated : 2025-04-02 14:32
NVD link : CVE-2025-2641
Mitre link : CVE-2025-2641
JSON object : View
Products Affected
phpgurukul
- art_gallery_management_system
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')