CVE-2019-25521

XooGallery Latest contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the galid parameter. Attackers can send GET requests to gal.php with malicious galid values to extract sensitive database information or...

CVE-2019-25521 XooGallery Lastest Latest SQL Injection via gal.php gal_id

XooGallery Latest contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the galid parameter. Attackers can send GET requests to gal.php with malicious galid values to extract sensitive database information or...

CVE-2019-25521

CVE-2019-25521 affects XooGallery Latest. The issue is an SQL injection in the gal_id parameter passed to gal.php, allowing unauthenticated attackers to manipulate database queries, extract sensitive information, or modify data. CVSS 3.1: 8.2 (High) with network access, no user interaction requir...