CVE-2026-19210: SourceCodester Photo Share Website ajax.php save_upload unrestricted upload
A vulnerability has been found in SourceCodester Photo Share Website 1.0. The impacted element is an unknown function of the file /social/ajax.php?action=saveupload. Such manipulation of the argument img[]/imgName[] leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-19210?
The severity of CVE-2026-19210 is rated as medium with a score of 6.3.
How do I fix CVE-2026-19210?
To fix CVE-2026-19210, ensure that proper file type and size restrictions are implemented in the upload functionality.
What is the impact of CVE-2026-19210?
CVE-2026-19210 allows for unrestricted file uploads, potentially leading to the execution of malicious scripts on the server.
Who is affected by CVE-2026-19210?
Users of the SourceCodester Photo Share Website version 1.0 are affected by CVE-2026-19210.
Is CVE-2026-19210 a remote attack?
Yes, CVE-2026-19210 can be exploited remotely, allowing attackers to upload malicious files without authentication.