CVE-2025-55444

CRITICO 9.8CVE-2025-55444 · Published 20/08/2025 · updated 17/06/2026

In breve

CVE-2025-55444 è una vulnerabilità CRITICO (CVSS 9.8) che riguarda online artwork and fine arts project (vishalmathur).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.83%, superiore al 57.7% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
online artwork and fine arts project vishalmathur	`= 1.0`	No fix yet

Description

A SQL injection vulnerability exists in the id2 parameter of the cancel_booking.php page in Online Artwork and Fine Arts MCA Project 1.0. A remote attacker can inject arbitrary SQL queries, leading to database enumeration and potential remote code execution.

References

gist.github.com/Anudeepkadambala/88c6065f1de1597be96e50a573cde56e · Third Party Advisory
Anudeepkadambala/CVE-Reports · Exploit
Anudeepkadambala/CVE-Reports security advisory · Exploit
mathurvishal/Online-Artwork-and-Fine-Arts-MCA-Major-Project · Product

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free