CVE-2026-10875

MEDIUM

projectworlds Online Art Gallery Shop Project adminHome.ph sql injection

Title source: cna

Description

A security flaw has been discovered in projectworlds Online Art Gallery Shop Project 1.0. The impacted element is an unknown function of the file /admin/adminHome.ph. The manipulation of the argument social_twitter results in sql injection. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks.

References (5)

Core 5

Core References

Vdb Entry, Technical Description vdb-entry technical-description

VDB-368365 | projectworlds Online Art Gallery Shop Project adminHome.ph sql injection

https://vuldb.com/vuln/368365

Third Party Advisory third-party-advisory

CVE-2026-10875 | CVE Analysis and Report

https://vuldb.com/cve/CVE-2026-10875

Signature, Permissions Required signature permissions-required

VDB-368365 | CTI Indicators (IOB, IOC, TTP, IOA)

https://vuldb.com/vuln/368365/cti

Third Party Advisory third-party-advisory

Submit #831869 | projectworlds.com Online Art Gallery Shop Project 1.0 SQL Injection

https://vuldb.com/submit/831869

Exploit exploit issue-tracking

https://github.com/shq3526/cve/issues/10

Scores

CVSS v3 6.3

EPSS 0.0030

EPSS Percentile 21.7%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

CISA SSVC

Vulnrichment

Exploitation poc

Automatable no

Technical Impact partial

Details

CWE

CWE-74 CWE-89

Status published

Products (1)

projectworlds/Online Art Gallery Shop Project 1.0

Published Jun 04, 2026

Tracked Since Jun 05, 2026