{"id":7125,"date":"2025-06-21T13:12:27","date_gmt":"2025-06-21T13:12:27","guid":{"rendered":"http:\/\/localhost\/?p=7125"},"modified":"2025-06-21T13:12:27","modified_gmt":"2025-06-21T13:12:27","slug":"phpgurukul-art-gallery-management-system-changepropicphp-sql-injection","status":"publish","type":"post","link":"https:\/\/zero.redgem.net\/?p=7125","title":{"rendered":"PHPGurukul Art Gallery Management System changepropic.php sql injection"},"content":{"rendered":"
\n

CVE Details<\/h2>\n
\n
\n

Basic Information<\/h3>\n\n\n\n\n\n
Title<\/th>\nPHPGurukul Art Gallery Management System changepropic.php sql injection<\/td>\n<\/tr>\n
Type<\/th>\ncve<\/td>\n<\/tr>\n
Published<\/th>\n2025-06-21T17:00:17.094Z<\/td>\n<\/tr>\n
Last Seen<\/th>\n<\/td>\n<\/tr>\n<\/table>\n<\/div>\n
\n

Product Information<\/h3>\n\n\n\n\n
Vendor<\/th>\nPHPGurukul<\/td>\n<\/tr>\n
Product<\/th>\nArt Gallery Management System<\/td>\n<\/tr>\n
Version<\/th>\n1.1<\/td>\n<\/tr>\n<\/table>\n<\/div>\n<\/div>\n
\n

CVSS Information<\/h3>\n\n\n\n\n\n\n
Base Score<\/th>\n5.3 (MEDIUM)<\/td>\n<\/tr>\n
Attack Vector<\/th>\nCVSS:4.0\/AV:N\/AC:L\/AT:N\/PR:L\/UI:N\/VC:L\/VI:L\/VA:L\/SC:N\/SI:N\/SA:N\/E:P<\/td>\n<\/tr>\n
Confidentiality Impact<\/th>\n<\/td>\n<\/tr>\n
Integrity Impact<\/th>\n<\/td>\n<\/tr>\n
Availability Impact<\/th>\n<\/td>\n<\/tr>\n<\/table>\n<\/div>\n
\n

AI Analysis<\/h3>\n\n\n\n\n\n\n
AI Description<\/th>\nA SQL injection vulnerability in PHPGurukul Art Gallery Management System 1.1 allows remote attackers to inject malicious SQL code via the imageid argument in changepropic.php. This could lead to unauthorized data access or modification. The vulnerability is considered critical and has been publicly disclosed.<\/td>\n<\/tr>\n
AI Severity<\/th>\nMedium<\/td>\n<\/tr>\n
Vendor<\/th>\nPHPGurukul<\/td>\n<\/tr>\n
Product<\/th>\nArt Gallery Management System<\/td>\n<\/tr>\n
Affected Version<\/th>\n1.1<\/td>\n<\/tr>\n<\/table>\n<\/div>\n
\n

Affected Products<\/h4>\n