Art Gallery Management System SQL注入漏洞

Art Gallery Management System is an art gallery management system developed by Anuj Kumar, an individual developer. A security vulnerability exists in Art Gallery Management System Project PHP version 1.0, which can be exploited by an attacker to perform SQL injection via the username parameter i...

CVE-2023-23156

Art Gallery Management System Project in PHP 1.0 was discovered to contain a SQL injection vulnerability via the pid parameter in the single-product page...

PT-2023-18864 · Unknown · Art Gallery Management System Project

Name of the Vulnerable Software and Affected Versions: Art Gallery Management System Project version 1.0 Description: A stored cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the fullname parameter on the enquiry page...

CVE-2023-23158

CVE-2023-23158 refers to a stored cross-site scripting (XSS) vulnerability in the Art Gallery Management System Project v1.0. The issue allows an attacker to execute arbitrary web scripts or HTML by injecting a crafted payload into the message parameter on the enquiry page. The PT-2023-18865 entr...

CVE-2023-23155

CVE-2023-23155 affects Art Gallery Management System Project in PHP 1.0. The issue is a SQL injection in the Admin Login via the username parameter, which, per CVSS metrics, can lead to high impact on confidentiality, integrity, and availability (network access with user interaction not required)...

Art Gallery Management System SQL注入漏洞

Art Gallery Management System is an art gallery management system by Anuj Kumar, an individual developer. A security vulnerability exists in Art Gallery Management System Project v1.0, which stems from an SQL injection vulnerability...

CVE-2023-23157

Affected software: Art Gallery Management System Project v1.0. The vulnerability is a stored XSS in the fullname parameter on the enquiry page, caused by unsanitized input. Impact described: attackers can execute arbitrary web scripts/HTML; potential data theft or session compromise. Remediation ...

Music Gallery Site SQL注入漏洞

Music Gallery Site is a music gallery site by Carlo Montero, a personal developer. A SQL injection vulnerability exists in SourceCodester Music Gallery Site version 1.0 due to some unknown processing in the file viewcategory.php, which results in an sql injection via the parameter id...

CVE-2023-23156

CVE-2023-23156 affects the Art Gallery Management System Project in PHP version 1.0, with a SQL injection vulnerability exploitable via the pid parameter on the single-product page. Root cause: input from pid is concatenated into a SQL query, enabling unauthorized access to data. Documented impac...

Music Gallery Site SQL注入漏洞

Music Gallery Site is a music gallery site by Carlo Montero's personal developer. A SQL injection vulnerability exists in SourceCodester Music Gallery Site version 1.0, which originates from a security issue with certain unknown functions in the file /admin/?page=user/manage, resulting in a sql...

CVE-2023-23155

Art Gallery Management System Project in PHP 1.0 was discovered to contain a SQL injection vulnerability via the username parameter in the Admin Login...

PT-2023-16721 · Unknown · Sourcecodester Music Gallery Site

Name of the Vulnerable Software and Affected Versions: SourceCodester Music Gallery Site version 1.0 Description: A critical issue has been found, affecting an unknown function of the file /admin/?page=user/manage. The manipulation of the id argument leads to sql injection, allowing for remote...

Art Gallery Management System 跨站脚本漏洞

Art Gallery Management System is an art gallery management system by the individual developer Anuj Kumar. A security vulnerability exists in Art Gallery Management System Project v1.0, which stems from a stored cross-site scripting XSS vulnerability that can be exploited by an attacker to execute...

Music Gallery Site 1.0 SQL Injection

Music Gallery Site - SQL Injection on page musiclist.php and parameter cid is vulnerable, application url is ?page=musiclist&cid=?. Any remote attacker can access this page to exploit the vulnerbility. Date: 21 February 2023 CVE Assigned: CVE-2023-0938 mitre.org nvd.nist.org Author Name: Muhammad...

WordPress Simple Portfolio Gallery Plugin <= 0.1 is vulnerable to Cross Site Scripting (XSS)

Software Simple Portfolio Gallery Type Plugin Vulnerable versions = 0.1 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-26016 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 65c146beacd9 Credits Mahesh Nagabhairav...

CVE-2023-0961

A vulnerability was found in SourceCodester Music Gallery Site 1.0. It has been classified as critical. This affects an unknown part of the file viewmusicdetails.php of the component GET Request Handler. The manipulation of the argument id leads to sql injection. It is possible to initiate the...

CVE-2023-0962

A vulnerability was found in SourceCodester Music Gallery Site 1.0. It has been declared as critical. This vulnerability affects unknown code of the file Master.php of the component GET Request Handler. The manipulation of the argument id leads to sql injection. The attack can be initiated...

CVE-2023-0963

A vulnerability was found in SourceCodester Music Gallery Site 1.0. It has been rated as critical. This issue affects some unknown processing of the file Users.php of the component POST Request Handler. The manipulation leads to improper access controls. The attack may be initiated remotely. The...

CVE-2023-0963

A vulnerability was found in SourceCodester Music Gallery Site 1.0. It has been rated as critical. This issue affects some unknown processing of the file Users.php of the component POST Request Handler. The manipulation leads to improper access controls. The attack may be initiated remotely. The...

CVE-2023-0961

A vulnerability was found in SourceCodester Music Gallery Site 1.0. It has been classified as critical. This affects an unknown part of the file viewmusicdetails.php of the component GET Request Handler. The manipulation of the argument id leads to sql injection. It is possible to initiate the...