CVE-2025-2647: A vulnerability was found in PHPGurukul Art Gallery Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /search.php. The manipulat...

Summary

A vulnerability was found in PHPGurukul Art Gallery Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /search.php. The manipulation of the argument Search leads to sql injection. The attack may be launched remotely. The exploit has...

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software

Vendor	Product	Affected versions
phpgurukul	art_gallery_management_system	1.0 `cpe:2.3:a:phpgurukul:art_gallery_management_system:1.0:::::::*`

Original advisory text

A vulnerability was found in PHPGurukul Art Gallery Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /search.php. The manipulat...

A vulnerability was found in PHPGurukul Art Gallery Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /search.php. The manipulation of the argument Search leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

References

https://phpgurukul.com/ Product
https://vuldb.com/?ctiid.300662 Permissions Required VDB Entry
https://vuldb.com/?id.300662 Permissions Required VDB Entry
https://vuldb.com/?submit.519777 Third Party Advisory VDB Entry
https://github.com/liuhao2638/cve/issues/10 Exploit Issue Tracking Third Party Advisory