Lucene search
K

224 matches found

NVD
NVD
added 2026/06/04 11:16 p.m.5 views

CVE-2026-10875

A security flaw has been discovered in projectworlds Online Art Gallery Shop Project 1.0. The impacted element is an unknown function of the file /admin/adminHome.ph. The manipulation of the argument socialtwitter results in sql injection. The attack may be launched remotely. The exploit has been...

6.5CVSS0.00031EPSS
Exploits0References5
Vulnrichment
Vulnrichment
added 2026/06/04 10:45 p.m.2 views

CVE-2026-10874 projectworlds Online Art Gallery Shop Project adminHome.php sql injection

A vulnerability was identified in projectworlds Online Art Gallery Shop Project 1.0. The affected element is an unknown function of the file /admin/adminHome.php. The manipulation of the argument socialinsta leads to sql injection. The attack may be initiated remotely. The exploit is publicly...

6.5CVSS5.5AI score0.00031EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2026/06/04 12:0 a.m.7 views

PT-2026-46408

A vulnerability was identified in projectworlds Online Art Gallery Shop Project 1.0. The affected element is an unknown function of the file /admin/adminHome.php. The manipulation of the argument social insta leads to sql injection. The attack may be initiated remotely. The exploit is publicly...

6.5CVSS6.5AI score0.00031EPSS
Exploits0References6
Positive Technologies
Positive Technologies
added 2026/06/04 12:0 a.m.10 views

PT-2026-46409

A security flaw has been discovered in projectworlds Online Art Gallery Shop Project 1.0. The impacted element is an unknown function of the file /admin/adminHome.ph. The manipulation of the argument social twitter results in sql injection. The attack may be launched remotely. The exploit has bee...

6.5CVSS6.4AI score0.00031EPSS
Exploits0References6
NVD
NVD
added 2026/05/24 9:16 a.m.14 views

CVE-2026-9364

A flaw has been found in projectworlds Online Art Gallery Shop 1.0. Impacted is an unknown function of the file /admin/adminHome.php. Executing a manipulation of the argument sociallinked can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be use...

7.5CVSS0.00037EPSS
Exploits0References4
Cvelist
Cvelist
added 2026/05/24 7:30 a.m.12 views

CVE-2026-9364 projectworlds Online Art Gallery Shop adminHome.php sql injection

A flaw has been found in projectworlds Online Art Gallery Shop 1.0. Impacted is an unknown function of the file /admin/adminHome.php. Executing a manipulation of the argument sociallinked can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be use...

7.5CVSS0.00037EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2026/05/24 7:30 a.m.7 views

CVE-2026-9364 projectworlds Online Art Gallery Shop adminHome.php sql injection

A flaw has been found in projectworlds Online Art Gallery Shop 1.0. Impacted is an unknown function of the file /admin/adminHome.php. Executing a manipulation of the argument sociallinked can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be use...

7.5CVSS6.9AI score0.00037EPSS
Exploits0References4
EUVD
EUVD
added 2026/05/24 7:30 a.m.8 views

EUVD-2026-31577

A flaw has been found in projectworlds Online Art Gallery Shop 1.0. Impacted is an unknown function of the file /admin/adminHome.php. Executing a manipulation of the argument sociallinked can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be use...

7.5CVSS6.9AI score0.00037EPSS
Exploits0References4
CVE
CVE
added 2026/05/24 7:30 a.m.16 views

CVE-2026-9364

Affected software: projectworlds Online Art Gallery Shop 1.0. Vulnerability: SQL injection in /admin/adminHome.php via the social_linked argument due to unsafe handling. Impact: remote exploitation with potential impact on confidentiality, integrity, and availability. Exploit status: exploit publ...

7.5CVSS6.9AI score0.00037EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2026/05/18 2:45 a.m.7 views

CVE-2026-8785 projectworlds hospital-management-system-in-php GET Parameter update_info.php getAllPatientDetail sql injection

A flaw has been found in projectworlds hospital-management-system-in-php 1.0. Affected by this vulnerability is the function getAllPatientDetail of the file updateinfo.php of the component GET Parameter Handler. Executing a manipulation of the argument appointmentno can lead to sql injection. The...

7.5CVSS6.8AI score0.00039EPSS
Exploits0References5
CVE
CVE
added 2026/04/06 10:15 a.m.13 views

CVE-2026-5645

CVE-2026-5645 affects the projectworlds Car Rental System 1.0. The vulnerability is in the Parameter Handler’s file /pay.php , where manipulating the mpesa argument can cause an SQL injection . The attack can be launched remotely, and the exploit has been made publicly available, with exploit mat...

7.5CVSS6.9AI score0.00042EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2026/04/06 10:15 a.m.3 views

CVE-2026-5645 projectworlds Car Rental System Parameter pay.php sql injection

A weakness has been identified in projectworlds Car Rental System 1.0. Affected by this vulnerability is an unknown functionality of the file /pay.php of the component Parameter Handler. Executing a manipulation of the argument mpesa can lead to sql injection. The attack can be launched remotely...

7.5CVSS6.9AI score0.00042EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2026/04/06 7:30 a.m.1 views

CVE-2026-5634 projectworlds Car Rental Project Parameter book_car.php sql injection

A vulnerability was identified in projectworlds Car Rental Project 1.0. Affected by this vulnerability is an unknown functionality of the file /bookcar.php of the component Parameter Handler. The manipulation of the argument fname leads to sql injection. The attack can be initiated remotely. The...

7.5CVSS6.9AI score0.00042EPSS
Exploits0References4
CVE
CVE
added 2026/03/23 7:20 p.m.4 views

CVE-2026-4596

CVE-2026-4596 affects the projectworlds Lawyer Management System 1.0. The vulnerability is a cross-site scripting flaw in processing the argument first_Name in the file /lawyers.php, enabling remote exploitation. Exploit is publicly available per provided sources. No remediation or specific fixes...

5.4CVSS4.1AI score0.00038EPSS
Exploits1References4Affected Software1
Positive Technologies
Positive Technologies
added 2026/03/22 12:0 a.m.3 views

PT-2026-26971

A vulnerability was detected in projectworlds Online Notes Sharing System 1.0. This issue affects some unknown processing of the file /login.php of the component Parameters Handler. The manipulation of the argument Benutzer results in SQL Injection. The attack can be executed remotely. The exploi...

7.5CVSS6.8AI score0.00014EPSS
Exploits0References5
OSV
OSV
added 2026/03/08 7:16 p.m.3 views

CVE-2026-3757

A security flaw has been discovered in projectworlds Online Art Gallery Shop 1.0. Affected by this vulnerability is an unknown functionality of the file /?pass=1. The manipulation of the argument fnm results in sql injection. The attack may be launched remotely. The exploit has been released to t...

9.8CVSS5.7AI score0.00037EPSS
Exploits1References4
CVE
CVE
added 2026/03/08 6:2 p.m.7 views

CVE-2026-3759

CVE-2026-3759 affects projectworlds Online Art Gallery Shop 1.0. The vulnerability is in the admin code path (/admin/adminHome.php) where manipulation of the reach_nm parameter triggers an SQL injection, exploitable remotely. Public exploitation information is present (PoC-like activity in some s...

9.8CVSS5.8AI score0.00039EPSS
Exploits1References4Affected Software1
Cvelist
Cvelist
added 2026/03/08 6:2 p.m.31 views

CVE-2026-3757 projectworlds Online Art Gallery Shop pass sql injection

A security flaw has been discovered in projectworlds Online Art Gallery Shop 1.0. Affected by this vulnerability is an unknown functionality of the file /?pass=1. The manipulation of the argument fnm results in sql injection. The attack may be launched remotely. The exploit has been released to t...

7.5CVSS0.00037EPSS
Exploits1References4
CNNVD
CNNVD
added 2026/03/08 12:0 a.m.3 views

Projectworlds Online Art Gallery Shop SQL注入漏洞

Projectworlds Online Art Gallery Shop is an online art gallery store open source by Projectworlds. Version 1.0 of the Projectworlds Online Art Gallery Shop has a SQL injection vulnerability. This vulnerability stems from incorrect handling of the parameter fnm in the file/?pass=1, which may lead ...

9.8CVSS7.2AI score0.00037EPSS
Exploits1References5
CNNVD
CNNVD
added 2026/03/08 12:0 a.m.3 views

Projectworlds Online Art Gallery Shop SQL注入漏洞

Projectworlds Online Art Gallery Shop is an online art gallery store open source by Projectworlds. Version 1.0 of the Projectworlds Online Art Gallery Shop has a SQL injection vulnerability. This vulnerability arises from incorrect handling of the parameter “Info” in the file “admin/adminHome.php...

9.8CVSS7.2AI score0.00039EPSS
Exploits1References6
Rows per page
Query Builder