Online Art Gallery Shop vulnerabilities
5 known vulnerabilities in Online Art Gallery Shop from ProjectWorlds. 5 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.3 High severity
Online Art Gallery Shop: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A flaw has been found in projectworlds Online Art Gallery Shop 1.0. Impacted is an unknown function of the file /admin/adminHome.php. Executing a manipulation of the argument social_linked can lead to sql injection. The attack can be executed remotely. The exp
- 9.8 Critical severity
Online Art Gallery Shop: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A security vulnerability has been detected in projectworlds Online Art Gallery Shop 1.0. This affects an unknown part of the file /admin/adminHome.php. Such manipulation of the argument reach_nm leads to sql injection. The attack can be executed remotely. The
- 9.8 Critical severity
Online Art Gallery Shop: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A weakness has been identified in projectworlds Online Art Gallery Shop 1.0. Affected by this issue is some unknown functionality of the file /admin/adminHome.php. This manipulation of the argument Info causes sql injection. Remote exploitation of the attack i
- 9.8 Critical severity
Online Art Gallery Shop: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A security flaw has been discovered in projectworlds Online Art Gallery Shop 1.0. Affected by this vulnerability is an unknown functionality of the file /?pass=1. The manipulation of the argument fnm results in sql injection. The attack may be launched remotel
- 9.8 Critical severity
Online Art Gallery Shop: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in projectworlds Online Art Gallery Shop 1.0. The impacted element is an unknown function of the file /admin/registration.php of the component Registration Handler. The manipulation of the argument fname results in sql injection. It i