Projectworlds Online Art Gallery Shop 1.0 SQL Injection Risk

Summary

A security flaw in Projectworlds Online Art Gallery Shop 1.0 allows hackers to inject malicious code into the website's database through the admin interface. If exploited, this could lead to unauthorized access to sensitive information. Update to the latest version to prevent unauthorized access.

What to do

No fix is available yet. Check with your software vendor for updates.

Affected software

Vendor	Product	Affected versions	Fix available
projectworlds	online_art_gallery_shop	1.0	–

Original title

A security vulnerability has been detected in projectworlds Online Art Gallery Shop 1.0. This affects an unknown part of the file /admin/adminHome.php. Such manipulation of the argument reach_nm le...

Original description

A security vulnerability has been detected in projectworlds Online Art Gallery Shop 1.0. This affects an unknown part of the file /admin/adminHome.php. Such manipulation of the argument reach_nm leads to sql injection. The attack can be executed remotely. The exploit has been disclosed publicly and may be used.

nvd CVSS2.0 7.5

nvd CVSS3.1 7.3

nvd CVSS4.0 6.9

Vulnerability type

CWE-74 Injection

CWE-89 SQL Injection