CVE-2026-3757mediumCWE-74CWE-89

CVE-2026-3757: medium-severity vulnerability in projectworlds Online Art Gallery Shop

projectworlds Online Art Gallery Shop pass sql injection

Published · Updated

Follow this CVE+ Monitor Online Art Gallery Shop

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.9epss 0.4%
A security flaw has been discovered in projectworlds Online Art Gallery Shop 1.0. Affected by this vulnerability is an unknown functionality of the file /?pass=1. The manipulation of the argument fnm results in sql injection. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Affected products
projectworlds · Online Art Gallery Shop
Related CVEs — projectworlds Online Art Gallery Shop

In the same product, most dangerous first.

CVE-2026-3759MEDIUMprojectworlds Online Art Gallery Shop adminHome.php sql injectionEPSS 0.4%CVE-2026-3758MEDIUMprojectworlds Online Art Gallery Shop adminHome.php sql injectionEPSS 0.4%CVE-2026-3406MEDIUMprojectworlds Online Art Gallery Shop Registration registration.php sql injectionEPSS 0.4%CVE-2026-9364MEDIUMprojectworlds Online Art Gallery Shop adminHome.php sql injectionEPSS 0.3%