CVE-2026-3406

creationtimestamp| type| source ---|---|--- 2026-03-02 04:18:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mg2fk2fohw2n 2026-03-03 23:40:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mg6wwo5uhk2l...

CVE-2026-3406 projectworlds Online Art Gallery Shop Registration registration.php sql injection

A vulnerability was found in projectworlds Online Art Gallery Shop 1.0. The impacted element is an unknown function of the file /admin/registration.php of the component Registration Handler. The manipulation of the argument fname results in sql injection. It is possible to launch the attack...