PT-2026-111292 · Sourcecodester · Contact Tracing System

Santhoshkumar

·

CVE-2026-108973

·

Publicado

2026-10-13

·

Atualizado

2026-10-13

CVSS v3.1

7.3

Alta

VetorAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
A vulnerability was determined in SourceCodester Contact Tracing System 1.0. Affected by this issue is the function move uploaded file of the file /classes/Users.php?f=save. This manipulation of the argument img/id causes unrestricted upload. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized.

Exploit

Correção

Improper Access Control

Unrestricted File Upload

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-284CWE-434

Identificadores relacionados

CVE-2026-108973

Produtos afetados

Contact Tracing System