CVE-2025-55444
published 2025-08-20CVE-2025-55444: A SQL injection vulnerability exists in the id2 parameter of the cancel_booking.php page in Online Artwork and Fine Arts MCA Project 1.0. A remote attacker can…
PriorityP262critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
EPSS
0.77%
51.1th percentile
A SQL injection vulnerability exists in the id2 parameter of the cancel_booking.php page in Online Artwork and Fine Arts MCA Project 1.0. A remote attacker can inject arbitrary SQL queries, leading to database enumeration and potential remote code execution.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| vishalmathur | online_artwork_and_fine_arts_project | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No advisories linked to this vulnerability.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://gist.github.com/Anudeepkadambala/88c6065f1de1597be96e50a573cde56ehttps://github.com/Anudeepkadambala/CVE-Reports/blob/main/CVE-2025-55444_Disclosure.mdhttps://github.com/Anudeepkadambala/CVE-Reports/security/advisories/GHSA-r4mf-mr9h-f27mhttps://github.com/mathurvishal/Online-Artwork-and-Fine-Arts-MCA-Major-Project
2025-08-20
Published