CVE-2026-3758 - Vulnerability Analysis

Overview

projectworlds Online Art Gallery Shop 1.0 contains a SQL injection caused by manipulation of the "Info" argument in /admin/adminHome.php, letting remote attackers execute arbitrary SQL commands, exploit requires crafted request.

Severity & Score

Impact

Remote attackers can execute arbitrary SQL commands, potentially leading to data disclosure or modification.

Mitigation

Update to the latest version.

References

• https://github.com/hmKunlun/projectworldcve/issues/2
• https://vuldb.com/?ctiid.349736
• https://vuldb.com/?id.349736
• https://vuldb.com/?submit.768058
• https://vuldb.com/?submit.768958

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner