Phpgurukul Art Gallery Management System vulnerabilities, page 2
36 vulnerabilities
Known vulnerabilities in Phpgurukul Art Gallery Management System, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2025-6414phpgurukulart_gallery_management_system
EPSS score0.45%
A vulnerability classified as critical was found in PHPGurukul Art Gallery Management System 1.1. This vulnerability affects unknown code of the file /admin/changeimage2.php. The manipulation of the argument editid leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.CVE-2025-6417phpgurukulart_gallery_management_systemEPSS score0.45%
A vulnerability has been found in PHPGurukul Art Gallery Management System 1.1 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/add-artist.php. The manipulation of the argument awarddetails leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.CVE-2025-6410phpgurukulart_gallery_management_systemEPSS score0.45%
A vulnerability was found in PHPGurukul Art Gallery Management System 1.1. It has been classified as critical. Affected is an unknown function of the file /admin/edit-art-medium-detail.php. The manipulation of the argument editid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.CVE-2025-6415phpgurukulart_gallery_management_systemEPSS score0.45%
A vulnerability, which was classified as critical, has been found in PHPGurukul Art Gallery Management System 1.1. This issue affects some unknown processing of the file /admin/changeimage3.php. The manipulation of the argument editid leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.CVE-2025-6409phpgurukulart_gallery_management_systemEPSS score0.55%
A vulnerability was found in PHPGurukul Art Gallery Management System 1.1 and classified as critical. This issue affects some unknown processing of the file /admin/forgot-password.php. The manipulation of the argument email leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.CVE-2025-6411phpgurukulart_gallery_management_systemEPSS score0.45%
A vulnerability was found in PHPGurukul Art Gallery Management System 1.1. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/changepropic.php. The manipulation of the argument imageid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.CVE-2023-51978phpgurukulart_gallery_management_systemEPSS score0.54%
In PHPGurukul Art Gallery Management System v1.1, "Update Artist Image" functionality of "imageid" parameter is vulnerable to SQL Injection.CVE-2023-37771phpgurukulart_gallery_management_systemEPSS score1.49%
Art Gallery Management System v1.0 contains a SQL injection vulnerability via the cid parameter at /agms/product.php.CVE-2023-24726phpgurukulart_gallery_management_systemEPSS score1.13%
Art Gallery Management System v1.0 was discovered to contain a SQL injection vulnerability via the viewid parameter on the enquiry page.CVE-2023-23157phpgurukulart_gallery_management_systemEPSS score0.56%
A stored cross-site scripting (XSS) vulnerability in Art Gallery Management System Project v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the fullname parameter on the enquiry page.CVE-2023-23156phpgurukulart_gallery_management_systemEPSS score3.68%
Art Gallery Management System Project in PHP 1.0 was discovered to contain a SQL injection vulnerability via the pid parameter in the single-product page.CVE-2023-23162phpgurukulart_gallery_management_systemEPSS score4.38%
Art Gallery Management System Project v1.0 was discovered to contain a SQL injection vulnerability via the cid parameter at product.php.CVE-2023-23161phpgurukulart_gallery_management_systemEPSS score5.91%
A reflected cross-site scripting (XSS) vulnerability in Art Gallery Management System Project v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the artname parameter under ART TYPE option in the navigation bar.CVE-2023-23163phpgurukulart_gallery_management_systemEPSS score4.38%
Art Gallery Management System Project v1.0 was discovered to contain a SQL injection vulnerability via the editid parameter.CVE-2023-23155phpgurukulart_gallery_management_systemEPSS score1.15%
Art Gallery Management System Project in PHP 1.0 was discovered to contain a SQL injection vulnerability via the username parameter in the Admin Login.CVE-2023-23158phpgurukulart_gallery_management_systemEPSS score0.56%
A stored cross-site scripting (XSS) vulnerability in Art Gallery Management System Project v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the message parameter on the enquiry page.