224 matches found
CVE-2026-10875
A security flaw has been discovered in projectworlds Online Art Gallery Shop Project 1.0. The impacted element is an unknown function of the file /admin/adminHome.ph. The manipulation of the argument socialtwitter results in sql injection. The attack may be launched remotely. The exploit has been...
CVE-2026-10874 projectworlds Online Art Gallery Shop Project adminHome.php sql injection
A vulnerability was identified in projectworlds Online Art Gallery Shop Project 1.0. The affected element is an unknown function of the file /admin/adminHome.php. The manipulation of the argument socialinsta leads to sql injection. The attack may be initiated remotely. The exploit is publicly...
PT-2026-46408
A vulnerability was identified in projectworlds Online Art Gallery Shop Project 1.0. The affected element is an unknown function of the file /admin/adminHome.php. The manipulation of the argument social insta leads to sql injection. The attack may be initiated remotely. The exploit is publicly...
PT-2026-46409
A security flaw has been discovered in projectworlds Online Art Gallery Shop Project 1.0. The impacted element is an unknown function of the file /admin/adminHome.ph. The manipulation of the argument social twitter results in sql injection. The attack may be launched remotely. The exploit has bee...
CVE-2026-9364
A flaw has been found in projectworlds Online Art Gallery Shop 1.0. Impacted is an unknown function of the file /admin/adminHome.php. Executing a manipulation of the argument sociallinked can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be use...
CVE-2026-9364 projectworlds Online Art Gallery Shop adminHome.php sql injection
A flaw has been found in projectworlds Online Art Gallery Shop 1.0. Impacted is an unknown function of the file /admin/adminHome.php. Executing a manipulation of the argument sociallinked can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be use...
CVE-2026-9364 projectworlds Online Art Gallery Shop adminHome.php sql injection
A flaw has been found in projectworlds Online Art Gallery Shop 1.0. Impacted is an unknown function of the file /admin/adminHome.php. Executing a manipulation of the argument sociallinked can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be use...
EUVD-2026-31577
A flaw has been found in projectworlds Online Art Gallery Shop 1.0. Impacted is an unknown function of the file /admin/adminHome.php. Executing a manipulation of the argument sociallinked can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be use...
CVE-2026-9364
Affected software: projectworlds Online Art Gallery Shop 1.0. Vulnerability: SQL injection in /admin/adminHome.php via the social_linked argument due to unsafe handling. Impact: remote exploitation with potential impact on confidentiality, integrity, and availability. Exploit status: exploit publ...
CVE-2026-8785 projectworlds hospital-management-system-in-php GET Parameter update_info.php getAllPatientDetail sql injection
A flaw has been found in projectworlds hospital-management-system-in-php 1.0. Affected by this vulnerability is the function getAllPatientDetail of the file updateinfo.php of the component GET Parameter Handler. Executing a manipulation of the argument appointmentno can lead to sql injection. The...
CVE-2026-5645
CVE-2026-5645 affects the projectworlds Car Rental System 1.0. The vulnerability is in the Parameter Handler’s file /pay.php , where manipulating the mpesa argument can cause an SQL injection . The attack can be launched remotely, and the exploit has been made publicly available, with exploit mat...
CVE-2026-5645 projectworlds Car Rental System Parameter pay.php sql injection
A weakness has been identified in projectworlds Car Rental System 1.0. Affected by this vulnerability is an unknown functionality of the file /pay.php of the component Parameter Handler. Executing a manipulation of the argument mpesa can lead to sql injection. The attack can be launched remotely...
CVE-2026-5634 projectworlds Car Rental Project Parameter book_car.php sql injection
A vulnerability was identified in projectworlds Car Rental Project 1.0. Affected by this vulnerability is an unknown functionality of the file /bookcar.php of the component Parameter Handler. The manipulation of the argument fname leads to sql injection. The attack can be initiated remotely. The...
CVE-2026-4596
CVE-2026-4596 affects the projectworlds Lawyer Management System 1.0. The vulnerability is a cross-site scripting flaw in processing the argument first_Name in the file /lawyers.php, enabling remote exploitation. Exploit is publicly available per provided sources. No remediation or specific fixes...
PT-2026-26971
A vulnerability was detected in projectworlds Online Notes Sharing System 1.0. This issue affects some unknown processing of the file /login.php of the component Parameters Handler. The manipulation of the argument Benutzer results in SQL Injection. The attack can be executed remotely. The exploi...
CVE-2026-3757
A security flaw has been discovered in projectworlds Online Art Gallery Shop 1.0. Affected by this vulnerability is an unknown functionality of the file /?pass=1. The manipulation of the argument fnm results in sql injection. The attack may be launched remotely. The exploit has been released to t...
CVE-2026-3759
CVE-2026-3759 affects projectworlds Online Art Gallery Shop 1.0. The vulnerability is in the admin code path (/admin/adminHome.php) where manipulation of the reach_nm parameter triggers an SQL injection, exploitable remotely. Public exploitation information is present (PoC-like activity in some s...
CVE-2026-3757 projectworlds Online Art Gallery Shop pass sql injection
A security flaw has been discovered in projectworlds Online Art Gallery Shop 1.0. Affected by this vulnerability is an unknown functionality of the file /?pass=1. The manipulation of the argument fnm results in sql injection. The attack may be launched remotely. The exploit has been released to t...
Projectworlds Online Art Gallery Shop SQL注入漏洞
Projectworlds Online Art Gallery Shop is an online art gallery store open source by Projectworlds. Version 1.0 of the Projectworlds Online Art Gallery Shop has a SQL injection vulnerability. This vulnerability stems from incorrect handling of the parameter fnm in the file/?pass=1, which may lead ...
Projectworlds Online Art Gallery Shop SQL注入漏洞
Projectworlds Online Art Gallery Shop is an online art gallery store open source by Projectworlds. Version 1.0 of the Projectworlds Online Art Gallery Shop has a SQL injection vulnerability. This vulnerability arises from incorrect handling of the parameter “Info” in the file “admin/adminHome.php...