CVE-2026-3758: projectworlds Online Art Gallery Shop adminHome.php sql injection
A weakness has been identified in projectworlds Online Art Gallery Shop 1.0. Affected by this issue is some unknown functionality of the file /admin/adminHome.php. This manipulation of the argument Info causes sql injection. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be used for attacks.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-3758?
CVE-2026-3758 has a high severity level due to its exploitation potential via SQL injection.
How do I fix CVE-2026-3758?
To fix CVE-2026-3758, validate and sanitize all user inputs in the /admin/adminHome.php file to prevent SQL injection.
What software is affected by CVE-2026-3758?
CVE-2026-3758 affects Projectworlds Online Art Gallery Shop version 1.0.
Can CVE-2026-3758 lead to data breaches?
Yes, CVE-2026-3758 can lead to significant data breaches if exploited successfully.
Is CVE-2026-3758 easy to exploit?
CVE-2026-3758 is considered relatively easy to exploit, making it a critical vulnerability to address.