The vulnerability resides in the name parameter of the Action::save_user function within the admin/admin_class.php component of the Art Gallery Management System. An attacker can inject arbitrary SQL code by manipulating the Name field, leading to unauthorized read or modification of the underlying database. This flaw is a classic example of unsanitized user input leading to SQL injection (CWE-74) and generic SQL injection vulnerability (CWE-89). The impact is the potential disclosure of sensitive data, insertion of malicious data, or alteration of user roles and permissions.

Vendors and product affected are SourceCodester’s Art Gallery Management System, specifically version 1.0. No additional affected versions are listed in the available data.

The CVSS score of 6.9 indicates a moderate severity and the exploit can be performed remotely, as the attack may originate from any external host. The EPSS score is not available, and the vulnerability is not included in the CISA KEV catalog, but the public availability of an exploit suggests that attackers could attempt automated exploitation. The remote nature of the attack and the high likelihood of exploitation underscore the need for timely remedial action.