Art Gallery Management System

CVE-2025-7767 Jul 18, 01:15 LOW POC Monitor

Reflected cross-site scripting (XSS) in PHPGurukul Art Gallery Management System 1.1 allows authenticated attackers to inject malicious scripts via the artmed parameter in /admin/edit-art-medium-detail.php. The vulnerability requires user interaction (UI:P) and valid login credentials (PR:L) but impacts only integrity of the admin interface. Publicly available exploit code exists, though EPSS probability remains very low at 0.05%, suggesting limited real-world exploitation despite disclosure.

CVE-2025-6417 Jun 21, 20:15 LOW POC Monitor

SQL injection in PHPGurukul Art Gallery Management System 1.1 allows authenticated attackers to manipulate the awarddetails parameter in /admin/add-artist.php, potentially leading to data breach or system compromise. A public exploit is available, but no active exploitation has been reported.

CVE-2025-6416 Jun 21, 20:15 LOW POC Monitor

SQL injection in PHPGurukul Art Gallery Management System 1.1 allows authenticated attackers to execute arbitrary SQL commands via the editid parameter in /admin/changeimage4.php. Public exploit code exists, increasing risk for instances with admin panel exposure.

CVE-2025-6415 Jun 21, 19:15 LOW POC Monitor

SQL injection in PHPGurukul Art Gallery Management System 1.1 allows remote authenticated attackers to execute arbitrary SQL commands via the editid parameter in /admin/changeimage3.php. Public exploit code is available, but no active exploitation has been confirmed. EPSS score is low (0.08%), indicating limited exploitation likelihood.

CVE-2025-6414 Jun 21, 19:15 LOW POC Monitor

SQL injection in PHPGurukul Art Gallery Management System 1.1 allows remote authenticated attackers to execute arbitrary SQL commands via the editid parameter in /admin/changeimage2.php. A public exploit is available, but no active exploitation has been reported (EPSS 0.08%).

CVE-2025-6413 Jun 21, 18:15 LOW POC Monitor

SQL injection in PHPGurukul Art Gallery Management System 1.1 allows authenticated attackers to manipulate database queries via the editid parameter in /admin/changeimage1.php. Public exploit code exists, but no active exploitation has been confirmed. EPSS score is low (0.08%), indicating limited exploitation likelihood.

CVE-2025-6412 Jun 21, 18:15 LOW POC Monitor

SQL injection in PHPGurukul Art Gallery Management System 1.1 allows authenticated attackers to execute arbitrary SQL commands via the editid parameter in /admin/changeimage.php. A public exploit is available, but no active exploitation has been reported. The EPSS score is low (0.08%), indicating limited exploitation likelihood.

CVE-2025-6411 Jun 21, 17:15 LOW POC Monitor

SQL injection in PHPGurukul Art Gallery Management System 1.1 allows remote authenticated attackers to manipulate the imageid parameter in /admin/changepropic.php, potentially leading to unauthorized data access or modification. A public exploit is available, but no active exploitation has been reported.

CVE-2025-6410 Jun 21, 17:15 LOW POC Monitor

SQL injection in PHPGurukul Art Gallery Management System 1.1 allows authenticated attackers to execute arbitrary SQL commands via the 'editid' parameter in /admin/edit-art-medium-detail.php. Public exploit code is available, increasing the risk of targeted attacks.

CVE-2025-6409 Jun 21, 16:15 MEDIUM POC This Month

CVE-2025-6409 is a critical SQL injection vulnerability in PHPGurukul Art Gallery Management System 1.1 affecting the /admin/forgot-password.php endpoint. An unauthenticated remote attacker can manipulate the 'email' parameter to execute arbitrary SQL queries, potentially leading to unauthorized data access, modification, or denial of service. The vulnerability has been publicly disclosed with proof-of-concept availability, making it actively exploitable in the wild.

CVE-2025-4309 May 06, 04:16 MEDIUM POC This Month

A vulnerability was found in PHPGurukul Art Gallery Management System 1.1. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2025-4308 May 06, 03:15 MEDIUM POC This Month

A vulnerability was found in PHPGurukul Art Gallery Management System 1.1. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2025-4307 May 06, 03:15 MEDIUM POC This Month

A vulnerability was found in PHPGurukul Art Gallery Management System 1.1. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2025-4014 Apr 28, 10:15 MEDIUM POC This Month

A vulnerability was found in PHPGurukul Art Gallery Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2025-4013 Apr 28, 09:15 MEDIUM POC This Month

A vulnerability was found in PHPGurukul Art Gallery Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2025-2648 Mar 23, 12:15 MEDIUM POC This Week

A vulnerability classified as critical has been found in PHPGurukul Art Gallery Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2025-2647 Mar 23, 11:15 MEDIUM POC This Month

A vulnerability was found in PHPGurukul Art Gallery Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2025-2646 Mar 23, 10:15 MEDIUM POC This Week

A vulnerability was found in PHPGurukul Art Gallery Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2025-2645 Mar 23, 09:15 MEDIUM POC This Month

A vulnerability was found in PHPGurukul Art Gallery Management System 1.0. Rated medium severity (CVSS 5.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2025-2644 Mar 23, 08:15 MEDIUM POC This Month

A vulnerability was found in PHPGurukul Art Gallery Management System 1.0 and classified as critical.php. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2025-2643 Mar 23, 08:15 MEDIUM POC This Month

A vulnerability has been found in PHPGurukul Art Gallery Management System 1.0 and classified as critical. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2025-2642 Mar 23, 07:15 MEDIUM POC This Month

A vulnerability, which was classified as critical, was found in PHPGurukul Art Gallery Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2025-2641 Mar 23, 05:15 MEDIUM POC This Month

A vulnerability, which was classified as critical, has been found in PHPGurukul Art Gallery Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2025-2628 Mar 22, 22:15 MEDIUM POC This Month

A vulnerability, which was classified as critical, was found in PHPGurukul Art Gallery Management System 1.1. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2025-2627 Mar 22, 21:15 MEDIUM POC This Month

A vulnerability, which was classified as critical, has been found in PHPGurukul Art Gallery Management System 1.0.php. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2025-2047 Mar 06, 23:15 MEDIUM POC This Month

A vulnerability was found in PHPGurukul Art Gallery Management System 1.0. Rated medium severity (CVSS 5.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2023-51978 Jan 12, 16:15 MEDIUM POC This Month

In PHPGurukul Art Gallery Management System v1.1, "Update Artist Image" functionality of "imageid" parameter is vulnerable to SQL Injection. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2023-37771 Jul 31, 16:15 CRITICAL POC Act Now

Art Gallery Management System v1.0 contains a SQL injection vulnerability via the cid parameter at /agms/product.php. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2023-24726 Mar 15, 14:15 CRITICAL POC Act Now

Art Gallery Management System v1.0 was discovered to contain a SQL injection vulnerability via the viewid parameter on the enquiry page. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2023-23158 Feb 27, 16:15 MEDIUM POC This Month

A stored cross-site scripting (XSS) vulnerability in Art Gallery Management System Project v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2023-23157 Feb 27, 16:15 MEDIUM POC This Month

A stored cross-site scripting (XSS) vulnerability in Art Gallery Management System Project v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2023-23156 Feb 27, 16:15 CRITICAL POC Act Now

Art Gallery Management System Project in PHP 1.0 was discovered to contain a SQL injection vulnerability via the pid parameter in the single-product page. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2023-23155 Feb 27, 16:15 CRITICAL POC Act Now

Art Gallery Management System Project in PHP 1.0 was discovered to contain a SQL injection vulnerability via the username parameter in the Admin Login. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2023-23163 Feb 10, 20:15 CRITICAL POC Act Now

Art Gallery Management System Project v1.0 was discovered to contain a SQL injection vulnerability via the editid parameter. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2023-23162 Feb 10, 20:15 CRITICAL POC Act Now

Art Gallery Management System Project v1.0 was discovered to contain a SQL injection vulnerability via the cid parameter at product.php. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2023-23161 Feb 10, 20:15 MEDIUM POC This Month

A reflected cross-site scripting (XSS) vulnerability in Art Gallery Management System Project v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.