CVE-2025-2645

The vulnerability CVE-2025-2645 affects PHPGurukul Art Gallery Management System v1.0, in the /product.php function where the artname parameter is manipulated to trigger cross-site scripting. A remote attack is possible and the exploit has been disclosed publicly. Several connected sources corrob...

CVE-2025-2628

PHPGurukul Art Gallery Management System 1.1 is affected by a SQL injection in /art-enquiry.php via the eid parameter. The vulnerability arises from an unsafely constructed SQL statement, enabling remote exploitation; the public exploit is reported across multiple sources. Affected component: unk...

CVE-2023-23161

CVE-2023-23161: Reflected XSS in Art Gallery Management System Project v1.0. The vulnerability arises from the artname parameter under the ART TYPE navigation option, enabling arbitrary script execution in affected pages. Documented impact includes injection of web scripts potentially leading to ...

CVE-2025-2646

The CVE refers to PHPGurukul Art Gallery Management System 1.0 with a SQL injection in /admin/admin-profile.php, triggered by manipulating the contactnumber parameter. Public reports from CNVD/CNNVD and others confirm this vulnerability, describe it as critical (attackable remotely) and affecting...

CVE-2025-2643

CVE-2025-2643 affects PHPGurukul Art Gallery Management System 1.0. The vulnerability resides in an unknown code path of the file /admin/edit-art-type-detail.php?editid=1, where manipulation of the arttype parameter leads to an SQL injection. It is described as remote, with the exploit disclosed ...

CVE-2025-4309

CVE-2025-4309 affects PHPGurukul Art Gallery Management System 1.1. The vulnerability is in /admin/add-art-type.php where the arttype parameter is manipulated, triggering a SQL injection. It is exploitable remotely and has been publicly disclosed. Several sources classify the impact as high/criti...

CVE-2025-2644

PHPGurukul Art Gallery Management System 1.0 contains a SQL injection in /admin/add-art-product.php caused by lack of validation of the arttype parameter. The issue can be exploited remotely and has been publicly disclosed; multiple sources (NVD, Red Hat, CNVD, CNNVD, CVE lists) report the same v...

CVE-2025-4307

PHPGurukul Art Gallery Management System 1.1 is affected by an SQL injection in /admin/add-art-medium.php via the artmed parameter. The vulnerability can be exploited remotely and exploits have been publicly disclosed. Public guidance suggests disabling access to /admin/add-art-medium.php and res...

CVE-2025-2047

CVE-2025-2047 affects PHPGurukul Art Gallery Management System 1.0. A cross-site scripting vulnerability exists in the /search.php parameter search due to inadequate input filtering/escaping. Exploitation is remote and the public disclosure is noted. Other sources corroborate a reflected XSS risk...

CVE-2025-2642

CVE-2025-2642 affects PHPGurukul Art Gallery Management System 1.0. The SQL injection vulnerability originates from unsafely handling the parameters in /admin/edit-art-product-detail.php?editid=2, specifically the editide/sprice/description inputs, allowing remote exploitation. Exploit has been d...

CVE-2025-2627

CVE-2025-2627 affects PHPGurukul Art Gallery Management System 1.0. The vulnerability is in the /admin/contactus.php handling of the pagetitle parameter, where improper validation/sanitization allows SQL injection. Attackers may exploit remotely; the exploit has been disclosed publicly. Multiple ...

CVE-2025-2648

PHPGurukul Art Gallery Management System 1.0 is affected by a SQL injection in /admin/view-enquiry-detail.php via the viewid parameter. Several sources confirm the vulnerability can be exploited remotely and that the exploit is publicly disclosed; specific remediation steps are not provided in th...

CVE-2025-4013

CVE-2025-4013 affects PHPGurukul Art Gallery Management System 1.0. The vulnerability is a SQL injection in /admin/aboutus.php via the pagetitle parameter, exploitable remotely. PT-Security’s advisory provides a workaround: disable access to /admin/aboutus.php and restrict pagetitle input until a...

CVE-2023-23156

CVE-2023-23156 affects the Art Gallery Management System Project in PHP version 1.0, with a SQL injection vulnerability exploitable via the pid parameter on the single-product page. Root cause: input from pid is concatenated into a SQL query, enabling unauthorized access to data. Documented impac...

CVE-2023-23155

CVE-2023-23155 affects Art Gallery Management System Project in PHP 1.0. The issue is a SQL injection in the Admin Login via the username parameter, which, per CVSS metrics, can lead to high impact on confidentiality, integrity, and availability (network access with user interaction not required)...

CVE-2025-2647

The CVE-2025-2647 entry covers a SQL injection in PHPGurukul Art Gallery Management System 1.0, specifically in /search.php when processing the Search parameter. Multiple sources confirm remote exploitation is possible and that the exploit has been disclosed publicly. The related documents consis...

CVE-2023-24726

CVE-2023-24726 affects Art Gallery Management System v1.0. A SQL injection vulnerability exists via the viewid parameter on the enquiry page, allowing an attacker to manipulate queries and potentially access or modify data. The issue is repeatedly reported across multiple feeds (NVD/Red Hat/CVE l...

CVE-2025-4308

The CVE-2025-4308 entry concerns a SQL injection in PHPGurukul Art Gallery Management System 1.1, triggered by manipulating the arttype parameter in /admin/add-art-type.php. Root cause: lack of input validation for arttype, enabling remote attacker to execute SQL commands and potentially steal da...

CVE-2025-4014

PHPGurukul Art Gallery Management System 1.0 is affected by a SQL injection in the admin/manage-art-medium.php file via the artmed parameter. This is a remote, unauthenticated vulnerability with high/critical impact (data confidentiality, integrity, and availability). Multiple connected sources c...

CVE-2023-23162

CVE-2023-23162 affects Art Gallery Management System Project v1.0. The vulnerability is a SQL injection in product.php via the cid parameter, permitting unauthenticated access with high impact (per NVD: CVSS v3.1 base 9.8, Confidentiality/Integrity/Availability impact). Exploitation details are a...

CVE-2025-2641

CVE-2025-2641 affects PHPGurukul Art Gallery Management System 1.0; /admin/edit-artist-detail.php?editid=1 exposes SQL injection via the Name parameter due to insufficient input validation. Impact is high (confidentiality, integrity, availability). Exploitation may be remote; public disclosure no...

CVE-2023-23163

CVE-2023-23163 affects Art Gallery Management System Project v1.0. A SQL injection via the editid parameter is documented. Exploitation evidence exists (incl. authenticated PoC per Exploit-DB; reported exploitation), but no concrete patch/version mitigation is provided across the connected source...

CVE-2023-23158

CVE-2023-23158 refers to a stored cross-site scripting (XSS) vulnerability in the Art Gallery Management System Project v1.0. The issue allows an attacker to execute arbitrary web scripts or HTML by injecting a crafted payload into the message parameter on the enquiry page. The PT-2023-18865 entr...

CVE-2023-23157

Affected software: Art Gallery Management System Project v1.0. The vulnerability is a stored XSS in the fullname parameter on the enquiry page, caused by unsanitized input. Impact described: attackers can execute arbitrary web scripts/HTML; potential data theft or session compromise. Remediation ...

CVE-2023-37771

Art Gallery Management System v1.0 contains a SQL injection vulnerability via the cid parameter in /agms/product.php. Root cause: lack of validation of external SQL input for cid. Impact: data theft/unauthorized database access as described by multiple sources; exploitation status not detailed in...

CVE-2025-6411

CVE-2025-6411 affects PHPGurukul Art Gallery Management System 1.1. The vulnerability resides in the /admin/changepropic.php endpoint, where manipulation of the imageid parameter leads to SQL injection. Exploitation is possible remotely and exploit details have been publicly disclosed. Several co...

CVE-2023-51978

In PHPGurukul Art Gallery Management System v1.1, the Update Artist Image feature using the imageid parameter is vulnerable to SQL Injection due to insufficient input validation. Affects the imageid-handling path/file/function in that feature, enabling potential unauthorized SQL execution that co...

CVE-2025-6412

The CVE-2025-6412 entry affects PHPGurukul Art Gallery Management System 1.1, specifically the /admin/changeimage.php endpoint where the editid parameter is vulnerable to SQL injection. The vulnerability can be triggered remotely, and exploits have been disclosed publicly. Multiple references cor...

CVE-2025-7767

CVE-2025-7767 affects PHPGurukul Art Gallery Management System 1.1. The vulnerability lies in the /admin/edit-art-medium-detail.php file where the artmed parameter can be manipulated to trigger cross-site scripting (XSS). The issue is exploitable remotely, and multiple connected sources indicate ...

CVE-2025-6409

CVE-2025-6409 affects PHPGurukul Art Gallery Management System 1.1, with the vulnerability located in the file /admin/forgot-password.php. The issue arises from unsafely handling the email parameter, enabling SQL injection that can be exploited remotely and may disclose or alter data. Multiple co...

CVE-2025-6413

CVE-2025-6413 affects PHPGurukul Art Gallery Management System 1.1. The vulnerability resides in /admin/changeimage1.php where unvalidated input in the editid parameter enables SQL injection. Attackers can exploit it remotely, and public disclosures indicate the exploit is available. The issue is...

CVE-2025-6415

CVE-2025-6415 affects PHPGurukul Art Gallery Management System 1.1. The vulnerability is an undocumented SQL injection in the /admin/changeimage3.php file via the editid parameter, enabling remote attacker input with low privileges. Public exploits are mentioned; industry sources (CNVD/CNNVD) des...

CVE-2025-6410

CVE-2025-6410 affects PHPGurukul Art Gallery Management System 1.1. The vulnerability lies in an unknown function within /admin/edit-art-medium-detail.php where manipulating the editid parameter leads to SQL injection. It is exploitable remotely, and the exploit has been disclosed publicly. Sever...

CVE-2025-6416

CVE-2025-6416 affects PHPGurukul Art Gallery Management System 1.1. The vulnerability is an SQL injection in the /admin/changeimage4.php file caused by unsafely handling the editid parameter, exploitable remotely and potentially enabling data theft/alteration. Multiple connected sources corrobora...

CVE-2025-6414

CVE-2025-6414 affects PHPGurukul Art Gallery Management System 1.1. The vulnerability is an SQL injection in the /admin/changeimage2.php file caused by unsafely handling the editid parameter. Multiple connected sources (CNVD/CNVD, NVD, RH) confirm remote execution potential and public disclosure ...

CVE-2025-6417

The CVE-2025-6417 entry concerns PHPGurukul Art Gallery Management System v1.1. Affected is an unknown functionality in /admin/add-artist.php where the awarddetails parameter is vulnerable to SQL injection. This vulnerability can be exploited remotely and the exploit has been disclosed publicly, ...