CVE-2023-44267 — Online Art Gallery v1.0 - Multiple Unauthenticated SQL Injections (SQLi)

CVE-2023-44267

Online Art Gallery v1.0 - Multiple Unauthenticated SQL Injections (SQLi) PUBLISHED

Description (CNA)

Online Art Gallery v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'lnm' parameter of the header.php resource does not validate the characters received and they are sent unfiltered to the database.

Affected (CNA)

Vendor / product	Versions
Projectworlds Pvt. Limited / Online Art Gallery	affected 1.0

CWE

CWE-89

References

https://https://projectworlds.in/
https://fluidattacks.com/advisories/ono

ADP enrichment

CVE

No English description supplied.

https://https://projectworlds.in/
https://fluidattacks.com/advisories/ono

CISA-ADP

No English description supplied.

No references supplied.