Skip to content
Threat Feed
Subscribe

Vendor

Projectworlds

2 briefs RSS
high advisory

Online Art Gallery Shop 1.0 SQL Injection Vulnerability (CVE-2026-9364)

A SQL injection vulnerability (CVE-2026-9364) exists in projectworlds Online Art Gallery Shop version 1.0, specifically in the /admin/adminHome.php file, which can be exploited remotely by manipulating the social_linked argument, potentially leading to unauthorized data access or modification.

Online Art Gallery Shop 1.0 sql-injection vulnerability web-application
2r 2t 1c
high advisory

SQL Injection Vulnerability in projectworlds hospital-management-system-in-php 1.0 (CVE-2026-8785)

A SQL injection vulnerability (CVE-2026-8785) exists in the getAllPatientDetail function of the update_info.php file in projectworlds hospital-management-system-in-php version 1.0, allowing remote attackers to execute arbitrary SQL commands via the 'appointment_no' GET parameter.

hospital-management-system-in-php 1.0 cve sql-injection webapp
2r 1t 1c