critical9.8Public exploit code
CVE-2023-23156
Art Gallery Management System Project in PHP 1.0 was discovered to contain a SQL injection vulnerability via the pid parameter in the single-product page.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Art Gallery Management System Project in PHP v 1.0 - SQL injection2023-04-06 · webapps · php · Verified
Impact
Art Gallery Management System Project in PHP 1.0 was discovered to contain a SQL injection vulnerability via the pid parameter in the single-product page.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Phpgurukul | Art Gallery Management System | Version 1.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://gist.github.com/y0gesh-verma/3de9b3e3f0d2b63c07e6704e232d9620
- https://phpgurukul.com/art-gallery-management-system-using-php-and-mysql/
- https://phpgurukul.com/projects/Art-Gallery-MS-PHP.zip
- https://gist.github.com/y0gesh-verma/3de9b3e3f0d2b63c07e6704e232d9620
- https://phpgurukul.com/art-gallery-management-system-using-php-and-mysql/
- https://phpgurukul.com/projects/Art-Gallery-MS-PHP.zip