CVE-2025-6411: PHPGurukul Art Gallery Management System changepropic.php sql injection
A vulnerability was found in PHPGurukul Art Gallery Management System 1.1. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/changepropic.php. The manipulation of the argument imageid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-6411?
CVE-2025-6411 has been declared as critical.
How does CVE-2025-6411 impact the Art Gallery Management System?
CVE-2025-6411 allows sql injection through the manipulation of the imageid argument in the file /admin/changepropic.php.
Who is affected by CVE-2025-6411?
Any user of PHPGurukul Art Gallery Management System version 1.1 is affected by CVE-2025-6411.
How can I mitigate CVE-2025-6411?
To mitigate CVE-2025-6411, sanitize and validate user inputs before using them in SQL queries.
Is there a patch available for CVE-2025-6411?
As of now, there is no official patch released for CVE-2025-6411, so users should implement security best practices.