CVE-2025-6412: PHPGurukul Art Gallery Management System changeimage.php sql injection
A vulnerability was found in PHPGurukul Art Gallery Management System 1.1. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/changeimage.php. The manipulation of the argument editid leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-6412?
CVE-2025-6412 has been rated as critical due to its potential for SQL injection vulnerabilities.
What functionality is affected by CVE-2025-6412?
The vulnerability affects the file /admin/changeimage.php in PHPGurukul Art Gallery Management System.
What type of attack can be launched through CVE-2025-6412?
CVE-2025-6412 allows attackers to exploit SQL injection vulnerabilities.
How can I mitigate CVE-2025-6412?
Mitigation for CVE-2025-6412 involves validating and sanitizing user input in the affected functionality.
Is there a fix available for CVE-2025-6412?
As of now, specific patches or fixes for CVE-2025-6412 have not been publicly announced.