XooGallery is vulnerable to unauthenticated SQL injection attacks that allow remote actors to extract sensitive database information or modify application content.

The application fails to properly sanitize user-supplied input in the gal_id, photo_id, cat_id, and p parameters within multiple PHP files. This allows an unauthenticated attacker to inject malicious SQL commands directly into the backend database queries.

A successful exploit allows unauthorized access to the underlying database, leading to the potential exfiltration of sensitive organizational data or unauthorized modification of content. Given the CVSS score of 8.2, this vulnerability poses a high risk to data integrity and confidentiality, potentially resulting in significant reputational damage or regulatory non-compliance.

Immediate Action: As no official vendor patch is available, administrators should immediately restrict access to the vulnerable gallery files or consider migrating to a more secure and actively maintained alternative.

Proactive Monitoring: Review web server access logs for anomalous GET requests containing SQL syntax, such as UNION, SELECT, or comment characters, directed toward gal.php, photo.php, cat.php, and results.php.

Compensating Controls: Deploy a Web Application Firewall (WAF) with strict SQL injection filtering rules to block malicious payloads targeting these specific parameters before they reach the application.

Public Exploit Available: Yes, a published proof-of-concept exists as documented in the Exploit-DB entry 46609.

This vulnerability represents a critical security gap that can be exploited by any remote, unauthenticated attacker. Due to the lack of a vendor-provided patch, immediate action is required to either disable the affected components or implement robust WAF rules to mitigate the risk of data breach. Security teams should prioritize the replacement of this software if it no longer receives security updates.