CVE-2023-44267

Online Art Gallery v1.0 - Multiple Unauthenticated SQL Injections (SQLi)

State: Published
Severity: 9.8 Critical
Published: Oct 26, 2023
Updated: Sep 9, 2024
Reserved: Sep 27, 2023

Description

Online Art Gallery v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'lnm' parameter of the header.php resource does not validate the characters received and they are sent unfiltered to the database.

Scores

CVSS	Score	Vector	Source
3.1	9.8 Critical	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	Fluid Attacks

Weaknesses

CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Affected Products

Product	Versions
Online Art GalleryProjectworlds Pvt. Limited	1.0Affected

References

https://https//projectworlds.in/
https://fluidattacks.com/advisories/ono

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.