Lucene search
K

666 matches found

RedhatCVE
RedhatCVE
added yesterday8 views

CVE-2026-10875

A security flaw has been discovered in projectworlds Online Art Gallery Shop Project 1.0. The impacted element is an unknown function of the file /admin/adminHome.ph. The manipulation of the argument socialtwitter results in sql injection. The attack may be launched remotely. The exploit has been...

6.5CVSS6.4AI score0.00028EPSS
Exploits0References1
EUVD
EUVD
added 2 days ago5 views

EUVD-2026-34543

A security flaw has been discovered in projectworlds Online Art Gallery Shop Project 1.0. The impacted element is an unknown function of the file /admin/adminHome.ph. The manipulation of the argument socialtwitter results in sql injection. The attack may be launched remotely. The exploit has been...

6.5CVSS6.4AI score0.00028EPSS
Exploits0References6
NVD
NVD
added 3 days ago4 views

CVE-2026-10875

A security flaw has been discovered in projectworlds Online Art Gallery Shop Project 1.0. The impacted element is an unknown function of the file /admin/adminHome.ph. The manipulation of the argument socialtwitter results in sql injection. The attack may be launched remotely. The exploit has been...

6.5CVSS0.00028EPSS
Exploits0References5
CVE
CVE
added 3 days ago8 views

CVE-2026-10875

The CVE-2026-10875 entry affects projectworlds Online Art Gallery Shop Project 1.0. The vulnerability is in an unknown function of the file /admin/adminHome.ph; manipulating the social_twitter argument causes SQL injection. A remote attack is possible, and the exploit has been released publicly. ...

6.5CVSS6.4AI score0.00028EPSS
Exploits0References5
Cvelist
Cvelist
added 3 days ago23 views

CVE-2026-10874 projectworlds Online Art Gallery Shop Project adminHome.php sql injection

A vulnerability was identified in projectworlds Online Art Gallery Shop Project 1.0. The affected element is an unknown function of the file /admin/adminHome.php. The manipulation of the argument socialinsta leads to sql injection. The attack may be initiated remotely. The exploit is publicly...

6.5CVSS0.00028EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 3 days ago9 views

PT-2026-46409

A security flaw has been discovered in projectworlds Online Art Gallery Shop Project 1.0. The impacted element is an unknown function of the file /admin/adminHome.ph. The manipulation of the argument social twitter results in sql injection. The attack may be launched remotely. The exploit has bee...

6.5CVSS6.4AI score0.00028EPSS
Exploits0References6
Positive Technologies
Positive Technologies
added 3 days ago7 views

PT-2026-46408

A vulnerability was identified in projectworlds Online Art Gallery Shop Project 1.0. The affected element is an unknown function of the file /admin/adminHome.php. The manipulation of the argument social insta leads to sql injection. The attack may be initiated remotely. The exploit is publicly...

6.5CVSS6.5AI score0.00028EPSS
Exploits0References6
RedhatCVE
RedhatCVE
added 2026/05/28 8:13 p.m.5 views

CVE-2026-9364

A flaw has been found in projectworlds Online Art Gallery Shop 1.0. Impacted is an unknown function of the file /admin/adminHome.php. Executing a manipulation of the argument sociallinked can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be use...

7.5CVSS6.9AI score0.00037EPSS
Exploits0References1
NVD
NVD
added 2026/05/24 9:16 a.m.11 views

CVE-2026-9364

A flaw has been found in projectworlds Online Art Gallery Shop 1.0. Impacted is an unknown function of the file /admin/adminHome.php. Executing a manipulation of the argument sociallinked can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be use...

7.5CVSS0.00037EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2026/05/24 7:30 a.m.6 views

CVE-2026-9364 projectworlds Online Art Gallery Shop adminHome.php sql injection

A flaw has been found in projectworlds Online Art Gallery Shop 1.0. Impacted is an unknown function of the file /admin/adminHome.php. Executing a manipulation of the argument sociallinked can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be use...

7.5CVSS6.9AI score0.00037EPSS
Exploits0References4
Cvelist
Cvelist
added 2026/05/24 7:30 a.m.7 views

CVE-2026-9364 projectworlds Online Art Gallery Shop adminHome.php sql injection

A flaw has been found in projectworlds Online Art Gallery Shop 1.0. Impacted is an unknown function of the file /admin/adminHome.php. Executing a manipulation of the argument sociallinked can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be use...

7.5CVSS0.00037EPSS
Exploits0References4
CVE
CVE
added 2026/05/24 7:30 a.m.9 views

CVE-2026-9364

Affected software: projectworlds Online Art Gallery Shop 1.0. Vulnerability: SQL injection in /admin/adminHome.php via the social_linked argument due to unsafe handling. Impact: remote exploitation with potential impact on confidentiality, integrity, and availability. Exploit status: exploit publ...

7.5CVSS6.9AI score0.00037EPSS
Exploits0References4
EUVD
EUVD
added 2026/05/24 7:30 a.m.7 views

EUVD-2026-31577

A flaw has been found in projectworlds Online Art Gallery Shop 1.0. Impacted is an unknown function of the file /admin/adminHome.php. Executing a manipulation of the argument sociallinked can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be use...

7.5CVSS6.9AI score0.00037EPSS
Exploits0References4
CNNVD
CNNVD
added 2026/05/24 12:0 a.m.4 views

Projectworlds Online Art Gallery Shop SQL注入漏洞

Projectworlds Online Art Gallery Shop is an online art gallery store open source by Projectworlds. Version 1.0 of Projectworlds Online Art Gallery Shop has a SQL injection vulnerability. This vulnerability stems from improper handling of the parameter sociallinked in the file admin/adminHome.php,...

7.5CVSS7.2AI score0.00037EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2026/05/18 2:45 a.m.7 views

CVE-2026-8785 projectworlds hospital-management-system-in-php GET Parameter update_info.php getAllPatientDetail sql injection

A flaw has been found in projectworlds hospital-management-system-in-php 1.0. Affected by this vulnerability is the function getAllPatientDetail of the file updateinfo.php of the component GET Parameter Handler. Executing a manipulation of the argument appointmentno can lead to sql injection. The...

7.5CVSS6.8AI score0.00039EPSS
Exploits0References5
CVE
CVE
added 2026/05/18 2:45 a.m.10 views

CVE-2026-8785

Affected product: projectworlds hospital-management-system-in-php 1.0. The vulnerability is in the GET Parameter Handler, specifically the getAllPatientDetail function in update_info.php. The issue arises from manipulating the appointment_no argument, enabling SQL injection. It can be exploited r...

7.5CVSS6.8AI score0.00039EPSS
Exploits0References5
Cvelist
Cvelist
added 2026/05/18 2:45 a.m.32 views

CVE-2026-8785 projectworlds hospital-management-system-in-php GET Parameter update_info.php getAllPatientDetail sql injection

A flaw has been found in projectworlds hospital-management-system-in-php 1.0. Affected by this vulnerability is the function getAllPatientDetail of the file updateinfo.php of the component GET Parameter Handler. Executing a manipulation of the argument appointmentno can lead to sql injection. The...

7.5CVSS0.00039EPSS
Exploits0References5
CNNVD
CNNVD
added 2026/05/18 12:0 a.m.4 views

Projectworlds Hospital Management System 注入漏洞

Projectworlds Hospital Management System is a hospital management system developed by the Austrian company Projectworlds. Version 1.0 of the Projectworlds Hospital Management System has a SQL injection vulnerability. This vulnerability arises from the function getAllPatientDetail in the GET...

7.5CVSS7.2AI score0.00039EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/04/06 10:15 a.m.26 views

CVE-2026-5645 projectworlds Car Rental System Parameter pay.php sql injection

A weakness has been identified in projectworlds Car Rental System 1.0. Affected by this vulnerability is an unknown functionality of the file /pay.php of the component Parameter Handler. Executing a manipulation of the argument mpesa can lead to sql injection. The attack can be launched remotely...

7.5CVSS0.0004EPSS
Exploits0References4
CVE
CVE
added 2026/04/06 10:15 a.m.3 views

CVE-2026-5645

CVE-2026-5645 affects the projectworlds Car Rental System 1.0. The vulnerability is in the Parameter Handler’s file /pay.php , where manipulating the mpesa argument can cause an SQL injection . The attack can be launched remotely, and the exploit has been made publicly available, with exploit mat...

7.5CVSS6.9AI score0.0004EPSS
Exploits0References4
Rows per page
Query Builder