PT-2026-46408 · Projectworlds · Online Art Gallery Shop Project

Shqnq · Publicado 2026-06-04 · Atualizado 2026-06-04 · CVE-2026-10874

NVD

CVSS v2.0

6.5

Média

Vetor base

AV:N/AC:L/Au:S/C:P/I:P/A:P

A vulnerability was identified in projectworlds Online Art Gallery Shop Project 1.0. The affected element is an unknown function of the file /admin/adminHome.php. The manipulation of the argument social insta leads to sql injection. The attack may be initiated remotely. The exploit is publicly available and might be used.

Exploit

Correção

SQL injection

Special Elements Injection

Enumeração de Fraquezas

CWE-89

CWE-74

Identificadores relacionados

CVE-2026-10874

Produtos afetados

Online Art Gallery Shop Project

Referências · 6

• 🔥 https://github.com/shq3526/cve/issues/9 · Exploit
• https://vuldb.com/vuln/368364 · Nota
• https://vuldb.com/vuln/368364/cti · Nota
• https://vuldb.com/cve/CVE-2026-10874 · Nota
• https://vuldb.com/submit/831868 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-10874 · Nota de Segurança