CVE-2026-3695: SourceCodester Modern Image Gallery App delete.php path traversal
A vulnerability has been found in SourceCodester Modern Image Gallery App 1.0. Impacted is an unknown function of the file /delete.php. Such manipulation of the argument filename leads to path traversal. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-3695?
CVE-2026-3695 has not been assigned a severity score but represents a critical path traversal vulnerability in the SourceCodester Modern Image Gallery App.
How do I fix CVE-2026-3695?
To fix CVE-2026-3695, you should validate and sanitize user inputs in the delete.php file to prevent unauthorized file access.
What are the potential impacts of exploiting CVE-2026-3695?
Exploitation of CVE-2026-3695 could allow an attacker to access restricted files on the server, leading to data leakage or unauthorized actions.
Which versions of SourceCodester Modern Image Gallery App are affected by CVE-2026-3695?
CVE-2026-3695 affects version 1.0 of the SourceCodester Modern Image Gallery App.
How can I identify if my installation is vulnerable to CVE-2026-3695?
You can identify if your installation is vulnerable to CVE-2026-3695 by testing the delete.php file for path traversal vulnerabilities using crafted requests.