Beveiligingsadvies

CVE-2019-25523

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-03-12 15:36:55

Laatst bijgewerkt 2026-03-12 16:43:08

Toegewezen door VulnCheck

CVSS-score 8.8

Status PUBLISHED

Beschrijving

XooGallery Latest contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the cat_id parameter. Attackers can send GET requests to cat.php with malicious cat_id values to bypass authentication, extract sensitive data, or modify database contents.

← Alle CVE's bekijken Bekijk op cve.org ↗