XooGallery Latest contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to manipulate database queries by injecting SQL code thro…

XooGallery Latest contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to manipulate database queries through the photo_id parameter in photo.php. Attackers can send malicious GET requests to extract sensitive data, bypass authentication, or modify database contents. The vulnerability affects the photo_id parameter specifically and can be exploited without authentication. This represents a critical security flaw that could lead to complete database compromise.