CVE-2026-3759

HIGH

Online Art Gallery Shop 1.0 - SQL Injection

Title source: llm

Description

A security vulnerability has been detected in projectworlds Online Art Gallery Shop 1.0. This affects an unknown part of the file /admin/adminHome.php. Such manipulation of the argument reach_nm leads to sql injection. The attack can be executed remotely. The exploit has been disclosed publicly and may be used.

References (4)

Scores

CVSS v3 7.3
EPSS 0.0003
EPSS Percentile 7.5%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Classification

CWE
CWE-89 CWE-74
Status published

Affected Products (1)

projectworlds/online_art_gallery_shop

Timeline

Published Mar 08, 2026
Tracked Since Mar 09, 2026