CVE-2025-6415: PHPGurukul Art Gallery Management System changeimage3.php sql injection
A vulnerability, which was classified as critical, has been found in PHPGurukul Art Gallery Management System 1.1. This issue affects some unknown processing of the file /admin/changeimage3.php. The manipulation of the argument editid leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-6415?
CVE-2025-6415 is classified as a critical vulnerability.
How does CVE-2025-6415 affect the system?
CVE-2025-6415 allows for SQL injection through the manipulation of the editid argument in the /admin/changeimage3.php file.
What software is impacted by CVE-2025-6415?
CVE-2025-6415 affects the PHPGurukul Art Gallery Management System version 1.1.
How can I fix CVE-2025-6415?
To mitigate the risk of CVE-2025-6415, validate and sanitize the input data for the editid parameter in the affected PHP file.
What are the potential consequences of exploiting CVE-2025-6415?
Exploitation of CVE-2025-6415 could lead to unauthorized access to the database and manipulation of sensitive data.