CVE-2026-108902

pH7Builder pH7 Social Dating CMS before 18.5.0 contains a path traversal vulnerability in the picture module deletePhoto action that allows authenticated members to delete arbitrary files. Attackers can supply ../ sequences in the POST picturelink parameter to remove other members' photos or...

CVE-2026-108902 pH7Builder before 18.5.0 Path Traversal Arbitrary File Deletion via picture_link

pH7Builder pH7 Social Dating CMS before 18.5.0 contains a path traversal vulnerability in the picture module deletePhoto action that allows authenticated members to delete arbitrary files. Attackers can supply ../ sequences in the POST picturelink parameter to remove other members' photos or...

CVE-2026-108902 pH7Builder before 18.5.0 Path Traversal Arbitrary File Deletion via picture_link

pH7Builder pH7 Social Dating CMS before 18.5.0 contains a path traversal vulnerability in the picture module deletePhoto action that allows authenticated members to delete arbitrary files. Attackers can supply ../ sequences in the POST picturelink parameter to remove other members' photos or...

CVE-2026-108902

The pH7Builder (pH7 Social Dating CMS) software before version 18.5.0 is vulnerable to a path traversal vulnerability within the picture module 's deletePhoto() action. An authenticated member can exploit this by supplying ../ sequences in the POST picture_link parameter to delete arbitrary files...

CVE-2026-108902: Improper Limitation of a Pathname to a Restricted Directory

pH7Builder pH7 Social Dating CMS before 18.5.0 contains a path traversal vulnerability in the picture module deletePhoto action that allows authenticated members to delete arbitrary files. Attackers can supply ../ sequences in the POST picturelink parameter to remove other members' photos or...

Library Card System Code Vulnerabilities

Library Card System is a library management system developed by Md. Yamin Hossain, an individual developer in Bangladesh. A code issue vulnerability exists in Library Card System version 1.0 due to an unrestricted upload issue contained in the /signup.php file of the Add Picture module...

Google Chrome Security Bypass Vulnerability (CNVD-2023-75320)

Google Chrome is a web browser from Google, an American company. A security bypass vulnerability exists in Google Chrome prior to version 117.0.5938.62, which stems from an improper implementation of the Picture module. An attacker could exploit the vulnerability to bypass security restrictions...

Google Chrome security vulnerabilities

Google Chrome is a web browser from Google, an American company. A security bypass vulnerability exists in Google Chrome prior to version 117.0.5938.62, which stems from an improper implementation of the Picture module. An attacker could exploit the vulnerability to bypass security restrictions...