CVE-2026-19210 in Photo Share Website

Prediction

by VulDB Data Team • 08/07/2026

A vulnerability has been found in SourceCodester Photo Share Website 1.0. The impacted element is an unknown function of the file /social/ajax.php?action=save_upload. Such manipulation of the argument img[]/imgName[] leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Responsible: VulDB
• Moderation: accepted
• Entry: VDB-386955
• CPE: ready
• CWE: CWE-434 (confirmed)
• Exploit: Download
• CVSS: 6.3 (VulDB)
• EPSS: 0.00000
• KEV: no
• Activities: low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-19210
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-19210
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-19210/