CVE-2026-3406Disclosure(projectworlds / online_art_gallery_shop)

LOWCVSS 9.8 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A vulnerability was found in projectworlds Online Art Gallery Shop 1.0. The impacted element is an unknown function of the file /admin/registration.php of the component Registration Handler. The manipulation of the argument fname results in sql injection. It is possible to launch the attack remotely. The exploit has been made public and could be used.

projectworlds CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Exploit / PoC references

Vendor / third-party advisories

https://vuldb.com/?id.348301

Other references

https://vuldb.com/?ctiid.348301

Weakness type (CWE)

CWE-74CWE-89

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

online_art_gallery_shop

Threat summary

5 mentions across 4 observed days
Momentum state: stable

What's happening

Technical details provided in 5 signals
Disclosure: 5 classified signals
Peaked 3d ago at 2 mentions (2026-03-02); latest day: 1
5 total mentions across 4 days

Affected systems

Vendors

projectworlds

Products

online_art_gallery_shop

1 version affected across 1 product

Deep dive

Activity timeline5 mentions / 4d

Signal classification1 categories

Disclosure

5100.0%

Referenced assets3 URLs

By indicator

Classification over time

Date	Total	Labels

2026-03-02	2	Disclosure2
2026-03-05	1	Disclosure1
2026-03-06	1	Disclosure1
2026-03-07	1	Disclosure1

Full discourse5 posts

CRAC Learning - Tech@cracbot215d
Disclosure
CVE-2026-3406 (CVSS:6.9, HIGH) is Analyzed. A vulnerability was found in projectworlds Online Art Gallery Shop 1.0. The impacted element is an unknown function of t..https://nvd.nist.gov/vuln/detail/CVE-2026-3406 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
A moderate‑severity vulnerability (CVE‑2026‑3406) has been identified in Projectworlds Online Art Gallery Shop 1.0, with an unknown affected function and a CVSS score of 6.9. No exploitation details or remediation steps are included in the post.
0000027
173 followersView on X
CRAC Learning - Tech@cracbot216d
Disclosure
CVE-2026-3406 (CVSS:6.9, HIGH) is Analyzed. A vulnerability was found in projectworlds Online Art Gallery Shop 1.0. The impacted element is an unknown function of t..https://nvd.nist.gov/vuln/detail/CVE-2026-3406 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
The tweet announces the analysis of CVE‑2026‑3406, providing its CVSS score and noting it affects projectworlds Online Art Gallery Shop 1.0, but it does not present a PoC, exploit code, or evidence of active exploitation.
0000028
173 followersView on X
CRAC Learning - Tech@cracbot217d
Disclosure
CVE-2026-3406 (CVSS:6.9, HIGH) is Analyzed. A vulnerability was found in projectworlds Online Art Gallery Shop 1.0. The impacted element is an unknown function of t..https://nvd.nist.gov/vuln/detail/CVE-2026-3406 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
The post announces CVE-2026-3406, mentions its CVSS score and a link to NVD, but does not provide exploit details, patches, or evidence of active exploitation.
0000024
173 followersView on X
CyberDudeBivash® | Global Cybersecurity Company@cyberbivash220d
Disclosure
🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2026-3406 - projectworlds Online Art Gallery Shop Registration registration.php sql injection Intel Report: https://ift.tt/A6Q524B
Post summary
The message alerts to a potential SQL injection flaw (CVE-2026-3406) affecting projectworlds Online Art Gallery Shop's registration.php, but it offers no PoC, exploitation details, or mitigation guidance.
0000038
342 followersView on X
Vulmon Vulnerability Feed@VulmonFeeds220d
Disclosure
CVE-2026-3406 SQL Injection in ProjectWorlds Online Art Gallery Shop 1.0 via Registration Handler https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-3406
Post summary
A SQL injection vulnerability (CVE-2026-3406) was disclosed in ProjectWorlds Online Art Gallery Shop 1.0 via the registration handler, with details available on Vulmon.
0000062
4.0K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	projectworlds	online_art_gallery_shop	1.0	-	-

Explore more

Back to dashboard projectworlds CVEs online_art_gallery_shop vulnerabilities

What researchers are saying

CVE-2026-3406

CRAC Learning - Tech@cracbotDisclosure

A moderate‑severity vulnerability (CVE‑2026‑3406) has been identified in Projectworlds Online Art Gallery Shop 1.0, with an unknown affected function and a CVSS score of 6.9. No exploitation details or remediation steps are included in the post.

CRAC Learning - Tech@cracbotDisclosure

The tweet announces the analysis of CVE‑2026‑3406, providing its CVSS score and noting it affects projectworlds Online Art Gallery Shop 1.0, but it does not present a PoC, exploit code, or evidence of active exploitation.

CRAC Learning - Tech@cracbotDisclosure

The post announces CVE-2026-3406, mentions its CVSS score and a link to NVD, but does not provide exploit details, patches, or evidence of active exploitation.

CyberDudeBivash® | Global Cybersecurity Company@cyberbivashDisclosure

The message alerts to a potential SQL injection flaw (CVE-2026-3406) affecting projectworlds Online Art Gallery Shop's registration.php, but it offers no PoC, exploitation details, or mitigation guidance.

Vulmon Vulnerability Feed@VulmonFeedsDisclosure

A SQL injection vulnerability (CVE-2026-3406) was disclosed in ProjectWorlds Online Art Gallery Shop 1.0 via the registration handler, with details available on Vulmon.