Skip to content
OpenAdvisories
Critical · 9.8 CVE-2023-44267 EUVD-2023-48626GHSA-pqpq-95jv-jqmc

Online Art Gallery v1.0 - Multiple Unauthenticated SQL Injections (SQLi)

Published Oct 26, 2023 · Updated Sep 9, 2024 · Assigned by Fluid Attacks

Description

Online Art Gallery v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'lnm' parameter of the header.php resource does not validate the characters received and they are sent unfiltered to the database.

Affected products

VendorProductAffectedFixed
Projectworlds Pvt Online Art Gallery 1.0 —

References