1336 matches found
CVE-2023-23156
CVE-2023-23156 affects the Art Gallery Management System Project in PHP version 1.0, with a SQL injection vulnerability exploitable via the pid parameter on the single-product page. Root cause: input from pid is concatenated into a SQL query, enabling unauthorized access to data. Documented impac...
CVE-2023-23156
Art Gallery Management System Project in PHP 1.0 was discovered to contain a SQL injection vulnerability via the pid parameter in the single-product page...
CVE-2023-23155
CVE-2023-23155 affects Art Gallery Management System Project in PHP 1.0. The issue is a SQL injection in the Admin Login via the username parameter, which, per CVSS metrics, can lead to high impact on confidentiality, integrity, and availability (network access with user interaction not required)...
PT-2023-18864 · Unknown · Art Gallery Management System Project
Name of the Vulnerable Software and Affected Versions: Art Gallery Management System Project version 1.0 Description: A stored cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the fullname parameter on the enquiry page...
CVE-2023-23157
Affected software: Art Gallery Management System Project v1.0. The vulnerability is a stored XSS in the fullname parameter on the enquiry page, caused by unsanitized input. Impact described: attackers can execute arbitrary web scripts/HTML; potential data theft or session compromise. Remediation ...
CVE-2023-23158
CVE-2023-23158 refers to a stored cross-site scripting (XSS) vulnerability in the Art Gallery Management System Project v1.0. The issue allows an attacker to execute arbitrary web scripts or HTML by injecting a crafted payload into the message parameter on the enquiry page. The PT-2023-18865 entr...
CVE-2023-23155
Art Gallery Management System Project in PHP 1.0 was discovered to contain a SQL injection vulnerability via the username parameter in the Admin Login...
Art Gallery Management System 跨站脚本漏洞
Art Gallery Management System is an art gallery management system by the individual developer Anuj Kumar. A security vulnerability exists in Art Gallery Management System Project v1.0, which stems from a stored cross-site scripting XSS vulnerability that can be exploited by an attacker to execute...
SUSE CVE-2017-9143
In ImageMagick 7.0.5-5, the ReadARTImage function in coders/art.c allows attackers to cause a denial of service memory leak via a crafted .art file...
ryeartgallery.co.uk Cross Site Scripting vulnerability OBB-3194007
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2023-23163
Art Gallery Management System Project v1.0 was discovered to contain a SQL injection vulnerability via the editid parameter...
CVE-2023-23162
Art Gallery Management System Project v1.0 was discovered to contain a SQL injection vulnerability via the cid parameter at product.php...
CVE-2023-23163
Art Gallery Management System Project v1.0 was discovered to contain a SQL injection vulnerability via the editid parameter...
CVE-2023-23161
A reflected cross-site scripting XSS vulnerability in Art Gallery Management System Project v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the artname parameter under ART TYPE option in the navigation bar...
CVE-2023-23161
A reflected cross-site scripting XSS vulnerability in Art Gallery Management System Project v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the artname parameter under ART TYPE option in the navigation bar...
CVE-2023-23161
A reflected cross-site scripting XSS vulnerability in Art Gallery Management System Project v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the artname parameter under ART TYPE option in the navigation bar...
CVE-2023-23162
Art Gallery Management System Project v1.0 was discovered to contain a SQL injection vulnerability via the cid parameter at product.php...
CVE-2023-23163
Art Gallery Management System Project v1.0 was discovered to contain a SQL injection vulnerability via the editid parameter...
