Vulnerabilities ›

CVE-2026-9364

High

CWE-74 — Weakness Type

                    Published: May 24, 2026                      ·  Modified: May 31, 2026                      ·  Source: NVD                

CVSS v3

7.3

🔗 NVD Official

📄 Description (English)

A flaw has been found in projectworlds Online Art Gallery Shop 1.0. Impacted is an unknown function of the file /admin/adminHome.php. Executing a manipulation of the argument social_linked can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be used.

🤖 AI Executive Summary

CVE-2026-9364 is a SQL injection vulnerability in projectworlds Online Art Gallery Shop 1.0 affecting the /admin/adminHome.php file through the social_linked parameter. Remote attackers can exploit this flaw without authentication to manipulate database queries and potentially access sensitive data.

📄 Description (Arabic)

تم اكتشاف ثغرة حقن SQL في ملف /admin/adminHome.php بتطبيق projectworlds Online Art Gallery Shop الإصدار 1.0. يمكن للمهاجمين البعيدين استغلال معامل social_linked لتنفيذ أوامر SQL عشوائية والوصول إلى البيانات الحساسة. تم نشر طريقة الاستغلال علناً مما يزيد من خطورة الثغرة.

🤖 ملخص تنفيذي (AI)

A SQL injection vulnerability exists in projectworlds Online Art Gallery Shop 1.0 in the /admin/adminHome.php file via the social_linked parameter. This allows remote attackers to execute arbitrary SQL commands and compromise the application's database.

🤖 AI Intelligence Analysis Analyzed: May 26, 2026 21:23

🇸🇦 Saudi Arabia Impact Assessment

Saudi Relevance: high

🏢 Affected Saudi Sectors

telecom government banking

🎯 MITRE ATT&CK Techniques

T1190 T1083 T1005

⚖️ Saudi Risk Score (AI)

7.0

/ 10.0

🔧 Remediation Steps (English)

Immediately upgrade projectworlds Online Art Gallery Shop to a patched version if available. Implement input validation and parameterized queries for all user inputs, especially the social_linked parameter. Apply Web Application Firewall (WAF) rules to detect and block SQL injection attempts. Conduct a security audit of the admin panel and review database access logs for suspicious activity.

🔧 خطوات المعالجة (العربية)

قم بترقية تطبيق projectworlds Online Art Gallery Shop إلى نسخة معالجة فوراً إن توفرت. طبق التحقق من صحة المدخلات والاستعلامات المعاملة لجميع مدخلات المستخدمين خاصة معامل social_linked. طبق قواعد جدار حماية تطبيقات الويب لكشف ومنع محاولات حقن SQL. أجرِ تدقيقاً أمنياً شاملاً للوحة التحكم وراجع سجلات الوصول للقاعدة البيانات.

📋 Regulatory Compliance Mapping

🟢 NCA ECC 2024

A.13.1.1 A.14.2.1

🔵 SAMA CSF

ID.RA-1 PR.DS-6

🟡 ISO 27001:2022

A.12.6.1 A.14.2.1

🔗 References & Sources 4

🔗

https://github.com/Quafather/cve/issues/1

cna@vuldb.com

🔗

https://vuldb.com/submit/813133

cna@vuldb.com

🔗

https://vuldb.com/vuln/365327

cna@vuldb.com

🔗

https://vuldb.com/vuln/365327/cti

cna@vuldb.com

📊 CVSS Score

7.3

/ 10.0 — High

📊 CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Attack VectorN — None / Network

Attack ComplexityL — Low / Local

Privileges RequiredN — None / Network

User InteractionN — None / Network

ScopeU — Unchanged

ConfidentialityL — Low / Local

IntegrityL — Low / Local

AvailabilityL — Low / Local

📋 Quick Facts

Severity High

CVSS Score7.3

CWECWE-74

EPSS0.03%

Exploit No

Patch ✗ No

Published 2026-05-24

Source Feed nvd

🇸🇦 Saudi Risk Score

7.0

/ 10.0 — Saudi Risk

Priority: HIGH

🏷️ Tags

CWE-74

⚡ Actions

🔗 NVD Official Page ⚡ Exploit-DB Search 🐙 GitHub PoC Search 🎯 MITRE ATT&CK 📊 CVE Details

CVE-2026-9364

Introduce Yourself

Sign In Required