CVE-2026-3757Disclosure(projectworlds / online_art_gallery_shop)

LOWCVSS 9.8 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A security flaw has been discovered in projectworlds Online Art Gallery Shop 1.0. Affected by this vulnerability is an unknown functionality of the file /?pass=1. The manipulation of the argument fnm results in sql injection. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks.

projectworlds CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Exploit / PoC references

https://github.com/hmKunlun/projectworldcve/issues/1

Vendor / third-party advisories

Other references

https://vuldb.com/?ctiid.349735

Weakness type (CWE)

CWE-74CWE-89

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

online_art_gallery_shop

Threat summary

5 mentions across 4 observed days
Momentum state: stable

What's happening

Technical details provided in 3 signals
Disclosure: 3 classified signals
General: 2 classified signals
Peaked 2d ago at 2 mentions (2026-03-09); latest day: 1
5 total mentions across 4 days

Affected systems

Vendors

projectworlds

Products

online_art_gallery_shop

1 version affected across 1 product

Deep dive

Activity timeline5 mentions / 4d

Signal classification2 categories

Disclosure

360.0%

General

240.0%

Referenced assets4 URLs

By indicator

Classification over time

Date	Total	Labels

2026-03-08	1	General1
2026-03-09	2	Disclosure1General1
2026-03-12	1	Disclosure1
2026-03-13	1	Disclosure1

Full discourse5 posts

CRAC Learning - Tech@cracbot209d
Disclosure
CVE-2026-3757 (CVSS:6.9, HIGH) is Analyzed. A security flaw has been discovered in projectworlds Online Art Gallery Shop 1.0. Affected by this vulnerability is an u..https://nvd.nist.gov/vuln/detail/CVE-2026-3757 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
CVE-2026-3757 is announced as a high‑scoring vulnerability (CVSS 6.9) affecting Project Worlds Online Art Gallery Shop 1.0; the post provides basic technical details but no PoC, exploit, or patch information.
0000021
172 followersView on X
CRAC Learning - Tech@cracbot210d
Disclosure
CVE-2026-3757 (CVSS:6.9, HIGH) is Analyzed. A security flaw has been discovered in projectworlds Online Art Gallery Shop 1.0. Affected by this vulnerability is an u..https://nvd.nist.gov/vuln/detail/CVE-2026-3757 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
The post announces the discovery of CVE‑2026‑3757 in projectworlds Online Art Gallery Shop 1.0, providing basic severity information but no exploits or remediation guidance.
0000020
172 followersView on X
DailyCVE@dailycve212d
General
🟠 projectworlds Online Art Gallery Shop, SQL Injection, #CVE-2026-3757 (MEDIUM) https://dailycve.com/projectworlds-online-art-gallery-shop-sql-injection-cve-2026-3757-medium/
Post summary
CVE‑2026‑3757 is a medium‑severity SQL injection vulnerability affecting ProjectWorlds Online Art Gallery Shop; the post provides basic vulnerability details but no PoC, exploit code, or patch information.
0000025
166 followersView on X
RedPacket Security@RedPacketSec213d
Disclosure
CVE Alert: CVE-2026-3757 - projectworlds - Online Art Gallery Shop - https://www.redpacketsecurity.com/cve-alert-cve-2026-3757-projectworlds-online-art-gallery-shop/ #OSINT #ThreatIntel #CyberSecurity #cve-2026-3757 #projectworlds #online-art-gallery-shop
Post summary
The text announces a CVE alert for CVE-2026-3757 concerning ProjectWorlds’ Online Art Gallery Shop, but it contains no further technical or actionable details.
00000101
3.5K followersView on X
CVE@CVEnew213d
General
CVE-2026-3757 A security flaw has been discovered in projectworlds Online Art Gallery Shop 1.0. Affected by this vulnerability is an unknown functionality of the file /?pass=1. The m… https://www.cve.org/CVERecord?id=CVE-2026-3757
Post summary
The post briefly notes the discovery of CVE‑2026‑3757 affecting an unknown functionality at /?pass=1, but provides no technical details, exploitation evidence, or remediation information.
0000086
56.6K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	projectworlds	online_art_gallery_shop	1.0	-	-

Explore more

Back to dashboard projectworlds CVEs online_art_gallery_shop vulnerabilities

What researchers are saying

CVE-2026-3757

CRAC Learning - Tech@cracbotDisclosure

CVE-2026-3757 is announced as a high‑scoring vulnerability (CVSS 6.9) affecting Project Worlds Online Art Gallery Shop 1.0; the post provides basic technical details but no PoC, exploit, or patch information.

CRAC Learning - Tech@cracbotDisclosure

The post announces the discovery of CVE‑2026‑3757 in projectworlds Online Art Gallery Shop 1.0, providing basic severity information but no exploits or remediation guidance.

DailyCVE@dailycveGeneral

CVE‑2026‑3757 is a medium‑severity SQL injection vulnerability affecting ProjectWorlds Online Art Gallery Shop; the post provides basic vulnerability details but no PoC, exploit code, or patch information.

RedPacket Security@RedPacketSecDisclosure

The text announces a CVE alert for CVE-2026-3757 concerning ProjectWorlds’ Online Art Gallery Shop, but it contains no further technical or actionable details.

CVE@CVEnewGeneral

The post briefly notes the discovery of CVE‑2026‑3757 affecting an unknown functionality at /?pass=1, but provides no technical details, exploitation evidence, or remediation information.