📦 Art Gallery Management System

by Phpgurukul

🔍 What is Art Gallery Management System?

Description coming soon...

🛡️ Security Overview

Click on a severity to filter vulnerabilities

⚠️ Known Vulnerabilities

CVE-2023-37771

CRITICAL CVSS 9.8 Jul 31, 2023

Art Gallery Management System v1.0 has a SQL injection vulnerability in the product.php page's cid parameter that allows attackers to execute arbitrary SQL commands. This affects all systems running t...

CVE-2023-24726

CRITICAL CVSS 9.8 Mar 15, 2023

Art Gallery Management System v1.0 contains a SQL injection vulnerability in the viewid parameter on the enquiry page. This allows attackers to execute arbitrary SQL commands on the database. Anyone r...

CVE-2023-23155

CRITICAL CVSS 9.8 Feb 27, 2023

This SQL injection vulnerability in Art Gallery Management System 1.0 allows attackers to execute arbitrary SQL commands via the username parameter in the admin login page. This can lead to authentica...

CVE-2023-23162

CRITICAL CVSS 9.8 Feb 10, 2023

This SQL injection vulnerability in Art Gallery Management System v1.0 allows attackers to execute arbitrary SQL commands via the cid parameter in product.php. This can lead to data theft, authenticat...

CVE-2025-6409

HIGH CVSS 7.3 Jun 21, 2025

This critical SQL injection vulnerability in PHPGurukul Art Gallery Management System allows remote attackers to execute arbitrary SQL commands via the email parameter in the forgot-password.php admin...

CVE-2025-4309

HIGH CVSS 7.3 May 6, 2025

This critical SQL injection vulnerability in PHPGurukul Art Gallery Management System 1.1 allows attackers to manipulate database queries through the 'arttype' parameter in the /admin/add-art-type.php...

CVE-2025-4307

HIGH CVSS 7.3 May 6, 2025

This critical SQL injection vulnerability in PHPGurukul Art Gallery Management System 1.1 allows remote attackers to execute arbitrary SQL commands via the 'artmed' parameter in the /admin/add-art-med...

CVE-2025-4013

HIGH CVSS 7.3 Apr 28, 2025

A critical SQL injection vulnerability exists in PHPGurukul Art Gallery Management System 1.0, allowing remote attackers to execute arbitrary SQL commands via the 'pagetitle' parameter in /admin/about...

CVE-2025-2648

HIGH CVSS 7.3 Mar 23, 2025

This critical SQL injection vulnerability in PHPGurukul Art Gallery Management System 1.0 allows remote attackers to execute arbitrary SQL commands via the 'viewid' parameter in /admin/view-enquiry-de...

CVE-2025-2647

HIGH CVSS 7.3 Mar 23, 2025

This critical SQL injection vulnerability in PHPGurukul Art Gallery Management System 1.0 allows attackers to execute arbitrary SQL commands through the search.php file. Remote attackers can potential...

CVE-2025-2646

HIGH CVSS 7.3 Mar 23, 2025

This critical SQL injection vulnerability in PHPGurukul Art Gallery Management System 1.0 allows remote attackers to execute arbitrary SQL commands via the contactnumber parameter in /admin/admin-prof...

CVE-2025-2644

HIGH CVSS 7.3 Mar 23, 2025

This critical SQL injection vulnerability in PHPGurukul Art Gallery Management System 1.0 allows remote attackers to execute arbitrary SQL commands via the 'arttype' parameter in the /admin/add-art-pr...

CVE-2025-2643

HIGH CVSS 7.3 Mar 23, 2025

This critical SQL injection vulnerability in PHPGurukul Art Gallery Management System 1.0 allows attackers to manipulate database queries through the arttype parameter in the admin panel. Attackers ca...

CVE-2025-2641

HIGH CVSS 7.3 Mar 23, 2025

This critical SQL injection vulnerability in PHPGurukul Art Gallery Management System 1.0 allows attackers to manipulate database queries through the Name parameter in the admin/edit-artist-detail.php...

CVE-2025-6417

MEDIUM CVSS 6.3 Jun 21, 2025

This CVE describes a critical SQL injection vulnerability in PHPGurukul Art Gallery Management System 1.1. Attackers can exploit the 'awarddetails' parameter in the /admin/add-artist.php file to execu...

CVE-2025-6415

MEDIUM CVSS 6.3 Jun 21, 2025

This critical SQL injection vulnerability in PHPGurukul Art Gallery Management System allows remote attackers to execute arbitrary SQL commands via the editid parameter in /admin/changeimage3.php. Thi...

CVE-2025-6413

MEDIUM CVSS 6.3 Jun 21, 2025

This critical SQL injection vulnerability in PHPGurukul Art Gallery Management System allows remote attackers to execute arbitrary SQL commands via the 'editid' parameter in /admin/changeimage1.php. A...

CVE-2025-6411

MEDIUM CVSS 6.3 Jun 21, 2025

This critical SQL injection vulnerability in PHPGurukul Art Gallery Management System 1.1 allows remote attackers to execute arbitrary SQL commands via the imageid parameter in /admin/changepropic.php...

CVE-2025-2628

MEDIUM CVSS 6.3 Mar 22, 2025

This critical vulnerability in PHPGurukul Art Gallery Management System 1.1 allows remote attackers to execute SQL injection attacks via the 'eid' parameter in the /art-enquiry.php file. Attackers can...