CVE-2025-6413: PHPGurukul Art Gallery Management System changeimage1.php sql injection
Published Jun 21, 2025
·Updated
A vulnerability classified as critical has been found in PHPGurukul Art Gallery Management System 1.1. This affects an unknown part of the file /admin/changeimage1.php. The manipulation of the argument editid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Affected Software
2 affected components
Phpgurukul Art Gallery Management System
Phpgurukul Art Gallery Management System=1.1
Event History
Jun 21, 2025
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·06:15 PM
DescriptionSeverityWeaknessAffected Software
Jan 12, 57458
Event
via FIRST·06:15 AM
Frequently Asked Questions
1
What is the severity of CVE-2025-6413?
CVE-2025-6413 is classified as a critical vulnerability.
2
What type of vulnerability is CVE-2025-6413?
CVE-2025-6413 is an SQL injection vulnerability.
3
How does CVE-2025-6413 affect the PHPGurukul Art Gallery Management System?
CVE-2025-6413 affects the /admin/changeimage1.php file, allowing remote SQL injection attacks.
4
How can I fix CVE-2025-6413?
To fix CVE-2025-6413, sanitize user inputs and use parameterized queries in the affected PHP scripts.
5
Is it possible to exploit CVE-2025-6413 remotely?
Yes, CVE-2025-6413 can be exploited remotely.