CVE-2026-3757: projectworlds Online Art Gallery Shop pass sql injection
A security flaw has been discovered in projectworlds Online Art Gallery Shop 1.0. Affected by this vulnerability is an unknown functionality of the file /?pass=1. The manipulation of the argument fnm results in sql injection. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-3757?
CVE-2026-3757 has been classified as a high-severity vulnerability due to its potential for SQL injection attacks.
How do I fix CVE-2026-3757?
To fix CVE-2026-3757, it is recommended to sanitize user inputs and implement prepared statements to prevent SQL injection.
What kind of attack is associated with CVE-2026-3757?
CVE-2026-3757 is associated with SQL injection attacks that exploit the manipulation of the argument in the affected functionality.
Which software is affected by CVE-2026-3757?
CVE-2026-3757 affects version 1.0 of the Projectworlds Online Art Gallery Shop.
What is the impact of exploiting CVE-2026-3757?
Exploiting CVE-2026-3757 can lead to unauthorized access to the database, allowing attackers to manipulate, retrieve, or delete sensitive data.