Vulnerabilities
Products Security index
Vulnerabilities
CVE-2026-3695
SourceCodester Modern Image Gallery App delete.php path traversal
CVE-2026-3302
SourceCodester Doctor Appointment System Sign Up register.php cross site scripting
CVE-2026-3163
SourceCodester Website Link Extractor URL file_get_contents server-side request forgery
CVE-2026-3070
SourceCodester Modern Image Gallery App upload.php cross site scripting
CVE-2025-70457
A Remote Code Execution (RCE) vulnerability exists in Sourcecodester Modern Image Gallery App v1.0 within the gallery/upload.php component. The application fails to properly validate uploaded file contents. Additionally, the application preserves the user-supplied file extension during the save process. This allows an unauthenticated attacker to upload arbitrary PHP code by spoofing the MIME type as an image, leading to full system compromise.
