CVE Catalog

CVE-2023-37771

CriticalCVSS 9.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Elevated risk
1.28%

66th percentile - higher than 66% of all known CVEs

Summary

Art Gallery Management System v1.0 contains a SQL injection vulnerability via the cid parameter at /agms/product.php.

Risk Assessment

Exploitation of this vulnerability may lead to unauthorized access to the database, jeopardizing data integrity and confidentiality.

Recommendation

It is recommended to validate and sanitize input data and to update the system to the latest version to eliminate this vulnerability.

Original NVD description (English source)

Art Gallery Management System v1.0 contains a SQL injection vulnerability via the cid parameter at /agms/product.php.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS