PT-2026-69067

Name of the Vulnerable Software and Affected Versions SourceCodester Photo Share Website version 1.0 Description An issue exists in the /social/ajax.php?action=signup endpoint where manipulating the email argument allows for SQL injection, a technique used to interfere with the queries that an...

PT-2026-68855

Name of the Vulnerable Software and Affected Versions SourceCodester Photo Share Website version 1.0 Description A remote SQL injection is possible due to improper handling of the email variable within an unknown function of the '/social/ajax.php?action=login' endpoint. SQL injection is a techniq...

CVE-2026-19230: Improper Neutralization of Input During Web Page Generation

A vulnerability was identified in SourceCodester Photo Share Website 1.0. This affects an unknown part of the file /social/ajax.php?action=saveupload of the component Comment Input Box. The manipulation of the argument content leads to cross site scripting. The attack may be initiated remotely. T...

CVE-2026-19211: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Photo Share Website 1.0. This affects an unknown function of the file /social/ajax.php?action=signup. Performing a manipulation of the argument email results in sql injection. Remote exploitation of the attack is possible. The exploit has been made publ...

CVE-2026-19196: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Photo Share Website 1.0. The impacted element is an unknown function of the file /social/ajax.php?action=login. The manipulation of the argument email results in sql injection. The attack can be launched remotely. The exploit has been made public and...

PT-2026-69066

Name of the Vulnerable Software and Affected Versions SourceCodester Photo Share Website version 1.0 Description An unrestricted upload issue exists in the /social/ajax.php?action=save upload endpoint. Remote attackers can exploit this by manipulating the img and imgName variables, allowing the...