CVE-2025-2643

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A vulnerability has been found in PHPGurukul Art Gallery Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/edit-art-type-detail.php?editid=1. The manipulation of the argument arttype leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-74CWE-89

Affected software

VendorProductVersions
PHPGurukulArt Gallery Management System1.0

References

Timeline

Published
Mar 23, 2025
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-264307.8In getDestinationForApp of SpaAppBridgeActivity, there is a possible cross-user file reveal due to a logic error in the code. This could leaCVE-2025-264317.8In setupAccessibilityServices of AccessibilityFragment.java, there is a possible way to hide an enabled accessibility service due to a logicCVE-2025-264325.5In multiple locations, there is a possible way to persistently DoS the device due to a missing length check. This could lead to local denialCVE-2025-264338.4In multiple locations, there is a possible way to trick a user into accepting a permission due to a tapjacking/overlay attack. This could leCVE-2025-264345.5In libxml2, there is a possible out of bounds read due to a buffer overflow. This could lead to local information disclosure with no additioCVE-2025-264357.8In updateState of ContentProtectionTogglePreferenceController.java, there is a possible way for a secondary user to disable the primary userCVE-2025-264367.8In clearAllowBgActivityStarts of PendingIntentRecord.java, there is a possible way for an application to launch an activity from the backgroCVE-2025-264375.5In CredentialManagerServiceStub of CredentialManagerService.java, there is a possible way to retrieve candidate credentials due to a missingCVE-2025-264388.8In smp_process_secure_connection_oob_data of smp_act.cc, there is a possible way to bypass SMP authentication due to Incorrect implementatioCVE-2025-264397.8In getComponentName of AccessibilitySettingsUtils.java, there is a possible way to for a malicious Talkback service to be enabled instead ofCVE-2025-26449.8A vulnerability was found in PHPGurukul Art Gallery Management System 1.0 and classified as critical. This issue affects some unknown procesCVE-2025-264407.8In multiple functions of CameraService.cpp, there is a possible way to use the camera from the background due to a permissions bypass. This
CVE-2025-2643: Critical severity, CVSS 9.8 | Vulnix