Vulnerability Summary for the Week of October 23, 2023

High Vulnerabilities

Primary
Vendor — Product

Description

Published

CVSS Score

Source & Patch Info

projectworlds_pvt._limited — online_art_gallery

Online Art Gallery v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The ‘fnm’ parameter of the header.php resource does not validate the characters received and they are sent unfiltered to the database.

2023-10-26

9.8

CVE-2023-43737
MISC
MISC

projectworlds_pvt._limited — online_art_gallery

Online Art Gallery v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The ’email’ parameter of the header.php resource does not validate the characters received and they are sent unfiltered to the database.

2023-10-27

9.8

CVE-2023-43738
MISC
MISC

project

[…]
Content was cut in order to protect the source.Please visit the source for the rest of the article.

This article has been indexed from Bulletins