CVE-2023-1416

A vulnerability classified as critical has been found in Simple Art Gallery 1.0. Affected is an unknown function of the file adminHome.php. The manipulation of the argument social_facebook leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-223128.

• CWE-89

• https://github.com/Songs-YZS/CveList/blob/main/SIMPLE%20ART%20GALLERY%20system%20has%20Sql%20injection%20vulnerabilities.pdfExploit, Vendor Advisory
• https://vuldb.com/?ctiid.223128Permissions Required, Third Party Advisory
• https://vuldb.com/?id.223128Third Party Advisory
• https://github.com/Songs-YZS/CveList/blob/main/SIMPLE%20ART%20GALLERY%20system%20has%20Sql%20injection%20vulnerabilities.pdfExploit, Vendor Advisory
• https://vuldb.com/?ctiid.223128Permissions Required, Third Party Advisory
• https://vuldb.com/?id.223128Third Party Advisory

Published

Mar 15, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-1409If the MongoDB Server running on Windows or macOS is configu…7.5
• CVE-2023-1410Grafana is an open-source platform for monitoring and observ…4.8
• CVE-2023-1412An unprivileged (non-admin) user can exploit an Improper Acc…7.8
• CVE-2023-1413The WP VR WordPress plugin before 8.2.9 does not sanitise an…6.1
• CVE-2023-1414The WP VR WordPress plugin before 8.3.0 does not have author…4.3
• CVE-2023-1415A vulnerability was found in Simple Art Gallery 1.0. It has …8.8
• CVE-2023-1417An issue has been discovered in GitLab affecting all version…4.3
• CVE-2023-1418A vulnerability classified as problematic was found in Sourc…6.1
• CVE-2023-1419A script injection vulnerability was found in the Debezium d…5.9
• CVE-2023-1420The Ajax Search Lite WordPress plugin before 4.11.1, Ajax Se…6.1
• CVE-2023-1421A reflected cross-site scripting vulnerability in the OAuth …6.1
• CVE-2023-1424Buffer Copy without Checking Size of Input ('Classic Buffer …8.1