CVE-2026-19210 in Photo Share Website

Résumé

par MITRE • 07/08/2026

A vulnerability has been found in SourceCodester Photo Share Website 1.0. The impacted element is an unknown function of the file /social/ajax.php?action=save_upload. Such manipulation of the argument img[]/imgName[] leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Responsable: VulDB
• Divulgation: 07/08/2026
• Modérer: accepté
• Entrée: VDB-386955
• CPE: prêt
• CWE: CWE-434 (confirmé)
• Exploitation: Télécharger
• CVSS: 6.3 (VulDB)
• EPSS: 0.00000
• KEV: non
• Activités: faible

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-19210
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-19210
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-19210/