Lucene search
+L

63 matches found

BDU FSTEC
BDU FSTEC
•added 2026/09/02 12:00 a.m.•25 views

The vulnerability of the /admin/adminHome.php file on the web platform used for displaying and selling art works in the Online Art Gallery Shop Project allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the /admin/adminHome.php file on the web platform used for displaying and selling art works in the Online Art Gallery Shop Project is related to incorrect elimination of special elements in the output data. Exploitation of this vulnerability could allow an attacker, operating...

6.5CVSS6.6AI score0.00303EPSS
SaveExploits0References2Affected Software1
NVD
NVD
•added 2026/06/04 11:16 p.m.•20 views

CVE-2026-10875

A security flaw has been discovered in projectworlds Online Art Gallery Shop Project 1.0. The impacted element is an unknown function of the file /admin/adminHome.ph. The manipulation of the argument socialtwitter results in sql injection. The attack may be launched remotely. The exploit has been...

6.5CVSS0.00303EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2026/06/04 10:45 p.m.•20 views

CVE-2026-10874 projectworlds Online Art Gallery Shop Project adminHome.php sql injection

A vulnerability was identified in projectworlds Online Art Gallery Shop Project 1.0. The affected element is an unknown function of the file /admin/adminHome.php. The manipulation of the argument socialinsta leads to sql injection. The attack may be initiated remotely. The exploit is publicly...

6.5CVSS6.5AI score0.00303EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/04 12:00 a.m.•3 views

CVE-2026-10874: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was identified in projectworlds Online Art Gallery Shop Project 1.0. The affected element is an unknown function of the file /admin/adminHome.php. The manipulation of the argument socialinsta leads to sql injection. The attack may be initiated remotely. The exploit is publicly...

6.5CVSS5.6AI score0.00303EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/06/04 12:00 a.m.•20 views

Projectworlds Online Art Gallery Shop Project SQL注入漏洞

Projectworlds Online Art Gallery Shop Project is a online art gallery store project developed by the Projectworlds team. Version 1.0 of Projectworlds Online Art Gallery Shop Project has a SQL injection vulnerability. This vulnerability arises from an unknown function in the file...

6.5CVSS6.6AI score0.00303EPSS
SaveExploits0References5
attackerkb
attackerkb
•added 2026/05/24 7:30 a.m.•16 views

CVE-2026-9364

A flaw has been found in projectworlds Online Art Gallery Shop 1.0. Impacted is an unknown function of the file /admin/adminHome.php. Executing a manipulation of the argument sociallinked can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be use...

7.5CVSS6.9AI score0.00411EPSS
SaveExploits0References4Affected Software1
EUVD
EUVD
•added 2026/05/24 7:30 a.m.•25 views

EUVD-2026-31577

A flaw has been found in projectworlds Online Art Gallery Shop 1.0. Impacted is an unknown function of the file /admin/adminHome.php. Executing a manipulation of the argument sociallinked can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be use...

7.5CVSS6.9AI score0.00411EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/05/24 7:30 a.m.•41 views

CVE-2026-9364 projectworlds Online Art Gallery Shop adminHome.php sql injection

A flaw has been found in projectworlds Online Art Gallery Shop 1.0. Impacted is an unknown function of the file /admin/adminHome.php. Executing a manipulation of the argument sociallinked can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be use...

7.5CVSS0.00411EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2026/05/24 7:30 a.m.•22 views

CVE-2026-9364 projectworlds Online Art Gallery Shop adminHome.php sql injection

A flaw has been found in projectworlds Online Art Gallery Shop 1.0. Impacted is an unknown function of the file /admin/adminHome.php. Executing a manipulation of the argument sociallinked can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be use...

7.5CVSS7AI score0.00411EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2026/05/24 12:00 a.m.•23 views

Projectworlds Online Art Gallery Shop SQL注入漏洞

Projectworlds Online Art Gallery Shop is an online art gallery store open source by Projectworlds. Version 1.0 of Projectworlds Online Art Gallery Shop has a SQL injection vulnerability. This vulnerability stems from improper handling of the parameter sociallinked in the file admin/adminHome.php,...

7.5CVSS7.2AI score0.00411EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/24 12:00 a.m.•5 views

CVE-2026-9364: Improper Neutralization of Special Elements used in an SQL Command

A flaw has been found in projectworlds Online Art Gallery Shop 1.0. Impacted is an unknown function of the file /admin/adminHome.php. Executing a manipulation of the argument sociallinked can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be use...

7.5CVSS7AI score0.00411EPSS
SaveExploits0References3
NVD
NVD
•added 2026/03/08 7:16 p.m.•12 views

CVE-2026-3759

A security vulnerability has been detected in projectworlds Online Art Gallery Shop 1.0. This affects an unknown part of the file /admin/adminHome.php. Such manipulation of the argument reachnm leads to sql injection. The attack can be executed remotely. The exploit has been disclosed publicly an...

9.8CVSS0.00594EPSS
SaveExploits1References4
NVD
NVD
•added 2026/03/08 7:16 p.m.•14 views

CVE-2026-3758

A weakness has been identified in projectworlds Online Art Gallery Shop 1.0. Affected by this issue is some unknown functionality of the file /admin/adminHome.php. This manipulation of the argument Info causes sql injection. Remote exploitation of the attack is possible. The exploit has been made...

9.8CVSS0.00594EPSS
SaveExploits1References5
CVE
CVE
•added 2026/03/08 6:02 p.m.•38 views

CVE-2026-3759

CVE-2026-3759 affects projectworlds Online Art Gallery Shop 1.0. The vulnerability is in the admin code path (/admin/adminHome.php) where manipulation of the reach_nm parameter triggers an SQL injection, exploitable remotely. Public exploitation information is present (PoC-like activity in some s...

9.8CVSS6.9AI score0.00594EPSS
SaveExploits1References4Affected Software1
Vulnrichment
Vulnrichment
•added 2026/03/08 6:02 p.m.•9 views

CVE-2026-3758 projectworlds Online Art Gallery Shop adminHome.php sql injection

A weakness has been identified in projectworlds Online Art Gallery Shop 1.0. Affected by this issue is some unknown functionality of the file /admin/adminHome.php. This manipulation of the argument Info causes sql injection. Remote exploitation of the attack is possible. The exploit has been made...

7.5CVSS7AI score0.00594EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2026/03/08 6:02 p.m.•56 views

CVE-2026-3758 projectworlds Online Art Gallery Shop adminHome.php sql injection

A weakness has been identified in projectworlds Online Art Gallery Shop 1.0. Affected by this issue is some unknown functionality of the file /admin/adminHome.php. This manipulation of the argument Info causes sql injection. Remote exploitation of the attack is possible. The exploit has been made...

7.5CVSS0.00594EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2026/03/08 12:00 a.m.•18 views

Projectworlds Online Art Gallery Shop SQL注入漏洞

Projectworlds Online Art Gallery Shop is an online art gallery store open source by Projectworlds. Version 1.0 of the Projectworlds Online Art Gallery Shop has a SQL injection vulnerability. This vulnerability arises from incorrect handling of the parameter “Info” in the file “admin/adminHome.php...

9.8CVSS7.2AI score0.00594EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/08 12:00 a.m.•3 views

CVE-2026-3758: Improper Neutralization of Special Elements used in an SQL Command

A weakness has been identified in projectworlds Online Art Gallery Shop 1.0. Affected by this issue is some unknown functionality of the file /admin/adminHome.php. This manipulation of the argument Info causes sql injection. Remote exploitation of the attack is possible. The exploit has been made...

9.8CVSS7AI score0.00594EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/08 12:00 a.m.•1 views

CVE-2026-3759: Improper Neutralization of Special Elements used in an SQL Command

A security vulnerability has been detected in projectworlds Online Art Gallery Shop 1.0. This affects an unknown part of the file /admin/adminHome.php. Such manipulation of the argument reachnm leads to sql injection. The attack can be executed remotely. The exploit has been disclosed publicly an...

9.8CVSS7AI score0.00594EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2026/03/08 12:00 a.m.•20 views

PT-2026-23969

Name of the Vulnerable Software and Affected Versions ProjectWorlds Online Art Gallery Shop version 1.0 Description A SQL injection issue exists in the software due to manipulation of the Info argument within the file '/admin/adminHome.php'. Remote exploitation is possible. The exploit has been...

9.8CVSS7AI score0.00594EPSS
SaveExploits1References14
Rows per page
Query Builder