CVE-2026-108973

A vulnerability was determined in SourceCodester Contact Tracing System 1.0. Affected by this issue is the function moveuploadedfile of the file /classes/Users.php?f=save. This manipulation of the argument img/id causes unrestricted upload. The attack can be initiated remotely. The exploit has be...

CVE-2026-108973 SourceCodester Contact Tracing System Users.php move_uploaded_file unrestricted upload

A vulnerability was determined in SourceCodester Contact Tracing System 1.0. Affected by this issue is the function moveuploadedfile of the file /classes/Users.php?f=save. This manipulation of the argument img/id causes unrestricted upload. The attack can be initiated remotely. The exploit has be...

EUVD-2026-98313

A vulnerability was determined in SourceCodester Contact Tracing System 1.0. Affected by this issue is the function moveuploadedfile of the file /classes/Users.php?f=save. This manipulation of the argument img/id causes unrestricted upload. The attack can be initiated remotely. The exploit has be...

CVE-2026-108973

The SourceCodester Contact Tracing System 1.0 is vulnerable to an unrestricted file upload via the move_uploaded_file function in the /classes/Users.php?f=save file. By manipulating the img/id argument, an attacker can perform a remote upload. Exploitation details have been publicly disclosed and...