These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
A SQL injection vulnerability has been discovered in the Online Art Gallery Shop Project 1.0. The vulnerability exists in an unknown function of the file /admin/adminHome.php, specifically in the manipulation of the argument social_twitter. This vulnerability allows for remote attacks and has been publicly disclosed. The CVSS score for this vulnerability is 2.1, indicating a low severity.
A SQL injection vulnerability was identified in the Online Art Gallery Shop Project 1.0. The affected element is an unknown function of the file /admin/adminHome.php. The manipulation of the argument social_insta leads to SQL injection. The attack may be initiated remotely. The exploit is publicly available and might be used.
A SQL injection vulnerability exists in projectworlds Online Art Gallery Shop 1.0, specifically within the /admin/adminHome.php file. The vulnerability stems from improper sanitization of the 'social_linked' parameter, allowing remote attackers to manipulate SQL queries. The issue was published on May 24, 2026, with subsequent modification on May 26, 2026. The vulnerability carries a CVSS 4.0 score of 5.5 [truncated]
CVE-2026-8785 describes a remotely reachable SQL injection in projectworlds hospital-management-system-in-php 1.0, specifically in getAllPatientDetail within update_info.php when the appointment_no GET parameter is manipulated. The supplied source metadata also indicates a public exploit reference and says the project was notified early via an issue report but had not responded at the time of publication. [truncated]
A vulnerability was identified in projectworlds Car Rental Project 1.0. Affected by this vulnerability is an unknown functionality of the file /book_car.php of the component Parameter Handler. The manipulation of the argument fname leads to sql injection. The attack can be initiated remotely. This vulnerability has a CVSS score of 5.5 and a severity of MEDIUM. Users of projectworlds Car Rental Project 1.0 [truncated]
A SQL injection vulnerability was found in Projectworlds Car Rental Project 1.0. The vulnerability is located in the /login.php file and can be exploited remotely, potentially leading to unauthorized access or data manipulation. The exploit has been publicly disclosed. Users should apply patches or mitigations to prevent exploitation of this vulnerability. The vulnerability allows an attacker to inject ma [truncated]