CVE-2026-3406 - projectworlds Online Art Gallery Shop Registration registration.php sql injection

CVE-2026-3406 - projectworlds Online Art Gallery Shop Registration registration.php sql injection

CVE ID : CVE-2026-3406 Published : March 2, 2026, 3:16 a.m. | 1 hour, 53 minutes ago Description : A vulnerability was found in projectworlds Online Art Gallery Shop 1.0. The impacted element is an unknown function of the file /admin/registration.php of the component Registration Handler. The manipulation of the argument fname results in sql injection. It is possible to launch the attack remotely. The exploit has been made public and could be used. Severity: 7.5 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE Details

Severity
HIGH
Published
March 2, 2026
Affected Product: php
Impact: sql injection