Lucene search
+L

10 matches found

EUVD
EUVD
•added 2026/03/08 3:30 a.m.•16 views

EUVD-2026-10202

A vulnerability has been found in SourceCodester Modern Image Gallery App 1.0. Impacted is an unknown function of the file /delete.php. Such manipulation of the argument filename leads to path traversal. It is possible to launch the attack remotely. The exploit has been disclosed to the public an...

6.9CVSS6.3AI score0.00881EPSS
SaveExploits1References7
OSV
OSV
•added 2026/03/08 1:15 a.m.•15 views

CVE-2026-3695

A vulnerability has been found in SourceCodester Modern Image Gallery App 1.0. Impacted is an unknown function of the file /delete.php. Such manipulation of the argument filename leads to path traversal. It is possible to launch the attack remotely. The exploit has been disclosed to the public an...

6.5CVSS5.5AI score0.00881EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/08 12:00 a.m.•1 views

CVE-2026-3695: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability has been found in SourceCodester Modern Image Gallery App 1.0. Impacted is an unknown function of the file /delete.php. Such manipulation of the argument filename leads to path traversal. It is possible to launch the attack remotely. The exploit has been disclosed to the public an...

6.9CVSS5.4AI score0.00881EPSS
SaveExploits1References1
OSV
OSV
•added 2026/02/24 5:17 a.m.•15 views

CVE-2026-3070

A vulnerability was detected in SourceCodester Modern Image Gallery App 1.0. Affected by this vulnerability is an unknown functionality of the file upload.php. The manipulation of the argument filename results in cross site scripting. The attack may be launched remotely. The exploit is now public...

6.1CVSS4.2AI score0.00477EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2026/02/24 4:32 a.m.•13 views

CVE-2026-3070 SourceCodester Modern Image Gallery App upload.php cross site scripting

A vulnerability was detected in SourceCodester Modern Image Gallery App 1.0. Affected by this vulnerability is an unknown functionality of the file upload.php. The manipulation of the argument filename results in cross site scripting. The attack may be launched remotely. The exploit is now public...

5.3CVSS3.9AI score0.00477EPSS
SaveExploits1References5
EUVD
EUVD
•added 2026/02/24 4:32 a.m.•17 views

EUVD-2026-7393

A vulnerability was detected in SourceCodester Modern Image Gallery App 1.0. Affected by this vulnerability is an unknown functionality of the file upload.php. The manipulation of the argument filename results in cross site scripting. The attack may be launched remotely. The exploit is now public...

6.1CVSS4AI score0.00477EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2026/02/24 12:00 a.m.•25 views

PT-2026-21663

A vulnerability was detected in SourceCodester Modern Image Gallery App 1.0. Affected by this vulnerability is an unknown functionality of the file upload.php. The manipulation of the argument filename results in cross site scripting. The attack may be launched remotely. The exploit is now public...

5.3CVSS3.8AI score0.00477EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/24 12:00 a.m.•4 views

CVE-2026-3070: Improper Neutralization of Input During Web Page Generation

A vulnerability was detected in SourceCodester Modern Image Gallery App 1.0. Affected by this vulnerability is an unknown functionality of the file upload.php. The manipulation of the argument filename results in cross site scripting. The attack may be launched remotely. The exploit is now public...

6.1CVSS3.9AI score0.00477EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2026/01/23 12:00 a.m.•5 views

CVE-2025-70457

A Remote Code Execution RCE vulnerability exists in Sourcecodester Modern Image Gallery App v1.0 within the gallery/upload.php component. The application fails to properly validate uploaded file contents. Additionally, the application preserves the user-supplied file extension during the save...

9.8CVSS6AI score0.00918EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/23 12:00 a.m.•1 views

CVE-2025-70457: Unrestricted Upload of File with Dangerous Type

A Remote Code Execution RCE vulnerability exists in Sourcecodester Modern Image Gallery App v1.0 within the gallery/upload.php component. The application fails to properly validate uploaded file contents. Additionally, the application preserves the user-supplied file extension during the save...

9.8CVSS6AI score0.00918EPSS
SaveExploits1References1
Rows per page
Query Builder