CVE-2023-23161

A reflected cross-site scripting (XSS) vulnerability in Art Gallery Management System Project v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the artname parameter under ART TYPE option in the navigation bar.

• CWE-79

• http://packetstormsecurity.com/files/171642/Art-Gallery-Management-System-Project-1.0-Cross-Site-Scripting.htmlThird Party Advisory, VDB Entry
• https://github.com/rahulpatwari/CVE/blob/main/CVE-2023-23161/CVE-2023-23161.txtExploit, Third Party Advisory
• https://phpgurukul.com/art-gallery-management-system-using-php-and-mysql/Product
• https://phpgurukul.com/projects/Art-Gallery-MS-PHP.zipProduct
• http://packetstormsecurity.com/files/171642/Art-Gallery-Management-System-Project-1.0-Cross-Site-Scripting.htmlThird Party Advisory, VDB Entry
• https://github.com/rahulpatwari/CVE/blob/main/CVE-2023-23161/CVE-2023-23161.txtExploit, Third Party Advisory
• https://phpgurukul.com/art-gallery-management-system-using-php-and-mysql/Product
• https://phpgurukul.com/projects/Art-Gallery-MS-PHP.zipProduct

Published

Feb 10, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-23151bloofoxCMS v0.5.2.1 was discovered to contain an arbitrary f…6.5
• CVE-2023-23155Art Gallery Management System Project in PHP 1.0 was discove…9.8
• CVE-2023-23156Art Gallery Management System Project in PHP 1.0 was discove…9.8
• CVE-2023-23157A stored cross-site scripting (XSS) vulnerability in Art Gal…5.4
• CVE-2023-23158A stored cross-site scripting (XSS) vulnerability in Art Gal…5.4
• CVE-2023-2316Improper path handling in Typora before 1.6.7 on Windows and…7.4
• CVE-2023-23162Art Gallery Management System Project v1.0 was discovered to…9.8
• CVE-2023-23163Art Gallery Management System Project v1.0 was discovered to…9.8
• CVE-2023-23169Synapsoft pdfocus 1.17 is vulnerable to local file inclusion…6.5
• CVE-2023-2317DOM-based XSS in updater/update.html in Typora before 1.6.7 …9.6
• CVE-2023-2318DOM-based XSS in src/muya/lib/contentState/pasteCtrl.js in M…9.6
• CVE-2023-2319It was discovered that an update for PCS package in RHBA-202…9.8