CVE-2026-19210

MEDIUM 6.3

SourceCodester Photo Share Website ajax.php save_upload unrestricted upload

CVSS Score

6.3

EPSS Score

0.0%

EPSS Percentile

0th

A vulnerability has been found in SourceCodester Photo Share Website 1.0. The impacted element is an unknown function of the file /social/ajax.php?action=save_upload. Such manipulation of the argument img[]/imgName[] leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

CWE	CWE-434 CWE-284
Vendor	sourcecodester
Product	photo share website
Published	Aug 7, 2026

Stay Ahead of the Next One

Get instant alerts for sourcecodester photo share website

Be the first to know when new medium vulnerabilities affecting sourcecodester photo share website are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Scope

Confidentiality

Integrity

Availability

Affected Versions

SourceCodester / Photo Share Website

1.0

References

NVD ↗ CVE.org ↗ EPSS Data ↗

vuldb.com: https://vuldb.com/vuln/386955 vuldb.com: https://vuldb.com/vuln/386955/cti vuldb.com: https://vuldb.com/cve/CVE-2026-19210 vuldb.com: https://vuldb.com/submit/864867 github.com: https://github.com/gensnext/cve/issues/2 sourcecodester.com: https://www.sourcecodester.com/

Credits

🔍 w4yl (VulDB User)