| 标题 | projectworlds Online Art Gallery Shop Project V1.0 SQL Injection |
|---|
| 描述 | A SQL injection vulnerability was found in the ' /?pass=1 ' file of the 'Online Art Gallery Shop Project'. The reason for this issue is that attackers inject malicious code from the parameter ' fnm‘ and use it directly in SQL queries without the need for appropriate cleaning or validation. This allows attackers to forge input values, thereby manipulating SQL queries and performing unauthorized operations. |
|---|
| 来源 | ⚠️ https://github.com/hmKunlun/projectworldcve/issues/1 |
|---|
| 用户 | kunlun (UID 95866) |
|---|
| 提交 | 2026-02-26 08時29分 (7 月前) |
|---|
| 管理 | 2026-03-07 21時34分 (10 days later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 349735 [projectworlds Online Art Gallery Shop 1.0 /?pass=1 fnm SQL注入] |
|---|
| 积分 | 20 |
|---|