A vulnerability, which was classified as critical, was found in PHPGurukul Art Gallery Management System 1.1. Affected is an unknown function of the file /admin/changeimage4.php. The manipulation of the argument editid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
References
Link | Resource |
---|---|
https://github.com/f1rstb100d/myCVE/issues/89 | Exploit Third Party Advisory |
https://phpgurukul.com/ | Product |
https://vuldb.com/?ctiid.313410 | Permissions Required |
https://vuldb.com/?id.313410 | Third Party Advisory VDB Entry |
https://vuldb.com/?submit.598232 | Third Party Advisory VDB Entry |
https://github.com/f1rstb100d/myCVE/issues/89 | Exploit Third Party Advisory |
Configurations
History
24 Jun 2025, 14:42
Type | Values Removed | Values Added |
---|---|---|
CPE | cpe:2.3:a:phpgurukul:art_gallery_management_system:1.1:*:*:*:*:*:*:* | |
First Time |
Phpgurukul art Gallery Management System
Phpgurukul |
|
References | () https://github.com/f1rstb100d/myCVE/issues/89 - Exploit, Third Party Advisory | |
References | () https://phpgurukul.com/ - Product | |
References | () https://vuldb.com/?ctiid.313410 - Permissions Required | |
References | () https://vuldb.com/?id.313410 - Third Party Advisory, VDB Entry | |
References | () https://vuldb.com/?submit.598232 - Third Party Advisory, VDB Entry |
23 Jun 2025, 15:15
Type | Values Removed | Values Added |
---|---|---|
References | () https://github.com/f1rstb100d/myCVE/issues/89 - | |
Summary |
|
21 Jun 2025, 20:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2025-06-21 20:15
Updated : 2025-06-24 14:42
NVD link : CVE-2025-6416
Mitre link : CVE-2025-6416
CVE.ORG link : CVE-2025-6416
JSON object : View
Products Affected
phpgurukul
- art_gallery_management_system