PT-2026-46408 · Projectworlds · Online Art Gallery Shop Project

Shqnq · Published 2026-06-04 · Updated 2026-06-04 · CVE-2026-10874

NVD

CVSS v2.0

6.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

A vulnerability was identified in projectworlds Online Art Gallery Shop Project 1.0. The affected element is an unknown function of the file /admin/adminHome.php. The manipulation of the argument social insta leads to sql injection. The attack may be initiated remotely. The exploit is publicly available and might be used.

Exploit

Fix

SQL injection

Special Elements Injection

Weakness Enumeration

CWE-89

CWE-74

Related Identifiers

CVE-2026-10874

Affected Products

Online Art Gallery Shop Project

References · 6

• 🔥 https://github.com/shq3526/cve/issues/9 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-10874 · Security Note
• https://vuldb.com/vuln/368364 · Note
• https://vuldb.com/vuln/368364/cti · Note
• https://vuldb.com/cve/CVE-2026-10874 · Note
• https://vuldb.com/submit/831868 · Note