projectworlds Online Art Gallery Shop 1.0: Unsecured Admin Panel

Summary

An attacker can access sensitive admin data or take control of the shop's system through the admin panel. This is a serious risk because an attacker can exploit this weakness to gain unauthorized access and potentially disrupt or damage the online shop. To protect your shop, update to a fixed version or patch the affected file /admin/adminHome.php.

What to do

No fix is available yet. Check with your software vendor for updates.

Affected software

Vendor	Product	Affected versions	Fix available
projectworlds	online_art_gallery_shop	1.0	–

Original title

A weakness has been identified in projectworlds Online Art Gallery Shop 1.0. Affected by this issue is some unknown functionality of the file /admin/adminHome.php. This manipulation of the argument...

Original description

A weakness has been identified in projectworlds Online Art Gallery Shop 1.0. Affected by this issue is some unknown functionality of the file /admin/adminHome.php. This manipulation of the argument Info causes sql injection. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be used for attacks.

nvd CVSS2.0 7.5

nvd CVSS3.1 7.3

nvd CVSS4.0 6.9

Vulnerability type

CWE-74 Injection

CWE-89 SQL Injection