CVE-2026-3759 - projectworlds Online Art Gallery Shop adminHome.php sql injection

Back Back to CVE browser

MEDIUM

projectworlds Online Art Gallery Shop adminHome.php sql injection

Published Mar 8, 2026

6.9

MEDIUM

CVSS 4.0

EPSS 0.59%

Description

A security vulnerability has been detected in projectworlds Online Art Gallery Shop 1.0. This affects an unknown part of the file /admin/adminHome.php. Such manipulation of the argument reach_nm leads to sql injection. The attack can be executed remotely. The exploit has been disclosed publicly and may be used.

Affected products

Vendor Projectworlds Product Online Art Gallery Shop Default
n/a
- Version
  1.0
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Projectworlds

Online Art Gallery Shop

n/a

Version	Status	Constraints
1.0	affected	-

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-74

CWE-89

SQL Injection

References (5)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-10262
Advisory
https://github.com/hmKunlun/projectworldcve/issues/3
exploitissue-trackingIssue TrackingThird Party Advisory
https://vuldb.com/?ctiid.349737
signaturepermissions-requiredPermissions RequiredThird Party AdvisoryVDB Entry
https://vuldb.com/?id.349737
vdb-entrytechnical-descriptionThird Party AdvisoryVDB Entry
https://vuldb.com/?submit.768059
third-party-advisoryThird Party AdvisoryVDB Entry

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-10262		Advisory
https://github.com/hmKunlun/projectworldcve/issues/3		exploitissue-trackingIssue TrackingThird Party Advisory
https://vuldb.com/?ctiid.349737		signaturepermissions-requiredPermissions RequiredThird Party AdvisoryVDB Entry
https://vuldb.com/?id.349737		vdb-entrytechnical-descriptionThird Party AdvisoryVDB Entry
https://vuldb.com/?submit.768059		third-party-advisoryThird Party AdvisoryVDB Entry