Sql injection

Art Gallery Management System Project v1.0 was discovered to contain a SQL injection vulnerability via the editid parameter...

Sql injection

Art Gallery Management System Project v1.0 was discovered to contain a SQL injection vulnerability via the cid parameter at product.php...

Cross site scripting

A reflected cross-site scripting XSS vulnerability in Art Gallery Management System Project v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the artname parameter under ART TYPE option in the navigation bar...

planet-vivid-gallery.de Cross Site Scripting vulnerability OBB-3188861

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PT-2023-18867 · Unknown · Art Gallery Management System Project

Name of the Vulnerable Software and Affected Versions: Art Gallery Management System Project version 1.0 Description: A reflected cross-site scripting issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the artname parameter under the ART TYPE optio...

CVE-2023-23163

Art Gallery Management System Project v1.0 was discovered to contain a SQL injection vulnerability via the editid parameter...

CVE-2023-23162

Art Gallery Management System Project v1.0 was discovered to contain a SQL injection vulnerability via the cid parameter at product.php...

CVE-2023-23161

CVE-2023-23161: Reflected XSS in Art Gallery Management System Project v1.0. The vulnerability arises from the artname parameter under the ART TYPE navigation option, enabling arbitrary script execution in affected pages. Documented impact includes injection of web scripts potentially leading to ...

Art Gallery Management System 跨站脚本漏洞

Art Gallery Management System is an art gallery management system by Anuj Kumar, an individual developer. A security vulnerability exists in Art Gallery Management System v1.0, which originates from a Reflected Cross Site Scripting XSS vulnerability. The vulnerability can be exploited by an...

Art Gallery Management System SQL注入漏洞

Art Gallery Management System is an art gallery management system by Anuj Kumar, an individual developer. A security vulnerability exists in Art Gallery Management System v1.0, which was discovered to contain a SQL injection vulnerability via the editid parameter...

CVE-2023-23163

CVE-2023-23163 affects Art Gallery Management System Project v1.0. A SQL injection via the editid parameter is documented. Exploitation evidence exists (incl. authenticated PoC per Exploit-DB; reported exploitation), but no concrete patch/version mitigation is provided across the connected source...

CVE-2023-23163

Art Gallery Management System Project v1.0 was discovered to contain a SQL injection vulnerability via the editid parameter...

PT-2023-18869 · Unknown · Art Gallery Management System Project

Name of the Vulnerable Software and Affected Versions: Art Gallery Management System Project version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the editid parameter. Recommendations: For Art Gallery Management System Project...

Art Gallery Management System SQL注入漏洞

Art Gallery Management System is an art gallery management system by the individual developer Anuj Kumar. A security vulnerability exists in Art Gallery Management System v1.0, which was discovered to contain a SQL injection vulnerability via the cid parameter of product.php...

CVE-2023-23161

A reflected cross-site scripting XSS vulnerability in Art Gallery Management System Project v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the artname parameter under ART TYPE option in the navigation bar...

CVE-2023-23162

CVE-2023-23162 affects Art Gallery Management System Project v1.0. The vulnerability is a SQL injection in product.php via the cid parameter, permitting unauthenticated access with high impact (per NVD: CVSS v3.1 base 9.8, Confidentiality/Integrity/Availability impact). Exploitation details are a...

krosno.artlookgallery.com Cross Site Scripting vulnerability OBB-3185562

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-0148

The Gallery Factory Lite WordPress plugin through 2.0.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

CVE-2023-0148

The Gallery Factory Lite WordPress plugin through 2.0.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

CVE-2023-0148 Gallery Factory Lite <= 2.0.0 - Contributor+ Stored XSS

The Gallery Factory Lite WordPress plugin through 2.0.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...