CVE-2026-109606: SourceCodester Art Gallery Management System Account Creation admin_class.php save_user sql injection
A vulnerability was detected in SourceCodester Art Gallery Management System 1.0. This impacts the function Action::saveuser of the file admin/adminclass.php of the component Account Creation. The manipulation of the argument Name results in sql injection. The attack may be performed from remote. The exploit is now public and may be used.
Affected Software
Event History
Frequently Asked Questions
Which deployments are exposed?
Deployments of SourceCodester Art Gallery Management System 1.0 are affected where the Account Creation functionality reaches Action::save_user in admin/admin_class.php. The issue is remotely exploitable.
What does an attacker need to exploit this issue?
An attacker can manipulate the Name argument supplied to the vulnerable account-creation function. The CVSS vector indicates no privileges or user interaction are required, and the attack complexity is low.
Is exploit code available?
Yes. A public exploit is available, which increases the likelihood that the vulnerability may be used.
What security impact can successful exploitation have?
Successful SQL injection can affect the confidentiality, integrity, and availability of the affected system, each rated Low in the supplied CVSS vector.