CVE-2023-1415

8.8 highEPSS 1.0%

High (8.8) in code-projects simple art gallery. EPSS 1.0% chance of exploitation in the next 30 days.

A vulnerability was found in Simple Art Gallery 1.0. It has been declared as critical. This vulnerability affects the function sliderPicSubmit of the file adminHome.php. The manipulation leads to unrestricted upload. The attack can be initiated remotely. VDB-223126 is the identifier assigned to this vulnerability.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.0% chance of exploitation in the next 30 days; higher than 63% of CVEs (scores of 2026-10-31)
CWE: CWE-434
Published: 2023-03-15
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

code-projects:simple_art_gallery

References

https://github.com/0xxtoby/Vuldb/blob/main/SIMPLE%20ART%20GALLERY%20system%20has%20a%20file%20upload%20(RCE)%20vulnerability.pdf
https://vuldb.com/?ctiid.223126
https://vuldb.com/?id.223126
https://github.com/0xxtoby/Vuldb/blob/main/SIMPLE%20ART%20GALLERY%20system%20has%20a%20file%20upload%20(RCE)%20vulnerability.pdf
https://vuldb.com/?ctiid.223126

Check your stack JSON