Vulnerability CVE-2023-44268
Published: 2023-10-26   Modified: 2023-10-27

Description:
Online Art Gallery v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'gender' parameter of the header.php resource does not validate the characters received and they are sent unfiltered to the database.

Type:

CWE-89

 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection'))

 References:
https://https://projectworlds.in/
https://fluidattacks.com/advisories/ono
Copyright 2026, cxsecurity.com

 

Back to Top