A critical SQL injection vulnerability in XooGallery allows unauthenticated remote attackers to compromise database integrity and extract sensitive information.

The application fails to properly sanitize user-supplied input in the gal.php, photo.php, cat.php, and results.php files. An unauthenticated attacker can exploit these flaws by injecting malicious SQL code into the gal_id, photo_id, cat_id, or p parameters, leading to unauthorized database interaction.

Successful exploitation allows an attacker to bypass authentication, extract sensitive data from the underlying database, or modify existing content. Given the CVSS score of 8.2, this vulnerability poses a high risk to business operations, as it could result in a significant data breach or full compromise of the application backend.

Immediate Action: As there is no official patch available from the vendor, organizations should immediately restrict access to the vulnerable scripts or disable the XooGallery component entirely until a secure version is released.

Proactive Monitoring: Security teams should monitor web server logs for HTTP GET requests containing SQL syntax patterns, such as the use of single quotes, OR conditions, or comments, targeting the identified PHP files.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to detect and block common SQL injection payloads targeting these specific parameters.

Public Exploit Available: Yes, a published proof-of-concept exists as documented in the Exploit-DB entry 46609.

Due to the lack of an official vendor patch and the availability of public exploit code, this vulnerability represents a severe risk to any environment hosting XooGallery. Administrators must prioritize the immediate removal or isolation of the vulnerable software to prevent potential data exfiltration or system compromise.