CVE-2025-6416: PHPGurukul Art Gallery Management System changeimage4.php sql injection
A vulnerability, which was classified as critical, was found in PHPGurukul Art Gallery Management System 1.1. Affected is an unknown function of the file /admin/changeimage4.php. The manipulation of the argument editid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-6416?
CVE-2025-6416 is classified as a critical vulnerability.
How does CVE-2025-6416 affect the PHPGurukul Art Gallery Management System?
CVE-2025-6416 allows for SQL injection via the argument editid in the /admin/changeimage4.php file.
What can an attacker do with CVE-2025-6416?
An attacker can remotely exploit CVE-2025-6416 to manipulate the database through SQL injection.
How do I fix CVE-2025-6416?
To fix CVE-2025-6416, validate and sanitize all user inputs, especially for the editid parameter.
Which version of PHPGurukul Art Gallery Management System is vulnerable to CVE-2025-6416?
CVE-2025-6416 affects all versions of PHPGurukul Art Gallery Management System up to 1.1.