CVE-2026-3759Disclosure(projectworlds / online_art_gallery_shop)

LOWCVSS 9.8 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A security vulnerability has been detected in projectworlds Online Art Gallery Shop 1.0. This affects an unknown part of the file /admin/adminHome.php. Such manipulation of the argument reach_nm leads to sql injection. The attack can be executed remotely. The exploit has been disclosed publicly and may be used.

projectworlds CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Exploit / PoC references

https://github.com/hmKunlun/projectworldcve/issues/3

Vendor / third-party advisories

Weakness type (CWE)

CWE-74CWE-89

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

online_art_gallery_shop

Threat summary

5 mentions across 4 observed days
Momentum state: stable

What's happening

Technical details provided in 3 signals
Disclosure: 3 classified signals
General: 2 classified signals
Peaked 2d ago at 2 mentions (2026-03-09); latest day: 1
5 total mentions across 4 days

Affected systems

Vendors

projectworlds

Products

online_art_gallery_shop

1 version affected across 1 product

Deep dive

Activity timeline5 mentions / 4d

Signal classification2 categories

Disclosure

360.0%

General

240.0%

Referenced assets4 URLs

By indicator

Classification over time

Date	Total	Labels

2026-03-08	1	General1
2026-03-09	2	Disclosure1General1
2026-03-12	1	Disclosure1
2026-03-13	1	Disclosure1

Full discourse5 posts

CRAC Learning - Tech@cracbot209d
Disclosure
CVE-2026-3759 (CVSS:6.9, HIGH) is Analyzed. A security vulnerability has been detected in projectworlds Online Art Gallery Shop 1.0. This affects an unknown part of..https://nvd.nist.gov/vuln/detail/CVE-2026-3759 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
A new vulnerability, CVE‑2026‑3759, has been identified in projectworlds Online Art Gallery Shop 1.0 with a CVSS score of 6.9 (HIGH); no exploitation, PoC, or patch details are provided.
0000020
172 followersView on X
CRAC Learning - Tech@cracbot210d
Disclosure
CVE-2026-3759 (CVSS:6.9, HIGH) is Analyzed. A security vulnerability has been detected in projectworlds Online Art Gallery Shop 1.0. This affects an unknown part of..https://nvd.nist.gov/vuln/detail/CVE-2026-3759 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
The post announces the detection of CVE‑2026‑3759 in ProjectWorlds Online Art Gallery Shop 1.0, noting its CVSS score and providing a link to the NVD entry, but offers no further technical or exploitation details.
0000019
172 followersView on X
DailyCVE@dailycve212d
General
🟠 projectworlds Online Art Gallery Shop, SQL Injection, #CVE-2026-3759 (MEDIUM) https://dailycve.com/projectworlds-online-art-gallery-shop-sql-injection-cve-2026-3759-medium/
Post summary
The post references CVE‑2026‑3759 as a medium‑severity SQL injection in Projectworld's Online Art Gallery Shop, but provides no further detail or actionable information.
0000023
166 followersView on X
RedPacket Security@RedPacketSec213d
Disclosure
CVE Alert: CVE-2026-3759 - projectworlds - Online Art Gallery Shop - https://www.redpacketsecurity.com/cve-alert-cve-2026-3759-projectworlds-online-art-gallery-shop/ #OSINT #ThreatIntel #CyberSecurity #cve-2026-3759 #projectworlds #online-art-gallery-shop
Post summary
Announcement of CVE‑2026‑3759 affecting ProjectWorlds online art gallery shop, with no additional technical details or mitigation information provided.
00000111
3.5K followersView on X
CVE@CVEnew213d
General
CVE-2026-3759 A security vulnerability has been detected in projectworlds Online Art Gallery Shop 1.0. This affects an unknown part of the file /admin/adminHome.php. Such manipulatio… https://www.cve.org/CVERecord?id=CVE-2026-3759
Post summary
The post announces CVE‑2026‑3759 with minimal details, containing only a link to the CVE record. No evidence of PoC, exploitation, patch, technical specs, or false‑positive claims is provided.
0000067
56.6K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	projectworlds	online_art_gallery_shop	1.0	-	-

Explore more

Back to dashboard projectworlds CVEs online_art_gallery_shop vulnerabilities

What researchers are saying

CVE-2026-3759

CRAC Learning - Tech@cracbotDisclosure

A new vulnerability, CVE‑2026‑3759, has been identified in projectworlds Online Art Gallery Shop 1.0 with a CVSS score of 6.9 (HIGH); no exploitation, PoC, or patch details are provided.

CRAC Learning - Tech@cracbotDisclosure

The post announces the detection of CVE‑2026‑3759 in ProjectWorlds Online Art Gallery Shop 1.0, noting its CVSS score and providing a link to the NVD entry, but offers no further technical or exploitation details.

DailyCVE@dailycveGeneral

The post references CVE‑2026‑3759 as a medium‑severity SQL injection in Projectworld's Online Art Gallery Shop, but provides no further detail or actionable information.

RedPacket Security@RedPacketSecDisclosure

Announcement of CVE‑2026‑3759 affecting ProjectWorlds online art gallery shop, with no additional technical details or mitigation information provided.

CVE@CVEnewGeneral

The post announces CVE‑2026‑3759 with minimal details, containing only a link to the CVE record. No evidence of PoC, exploitation, patch, technical specs, or false‑positive claims is provided.