PT-2026-111675 · Sourcecodester · Art Gallery Management System

Santhoshkumar

·

CVE-2026-109606

·

Publicado

2026-10-13

·

Atualizado

2026-10-13

CVSS v2.0

7.5

Alta

VetorAV:N/AC:L/Au:N/C:P/I:P/A:P
A vulnerability was detected in SourceCodester Art Gallery Management System 1.0. This impacts the function Action::save user of the file admin/admin class.php of the component Account Creation. The manipulation of the argument Name results in sql injection. The attack may be performed from remote. The exploit is now public and may be used.

Exploit

Correção

Special Elements Injection

SQL injection

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-74CWE-89

Identificadores relacionados

CVE-2026-109606

Produtos afetados

Art Gallery Management System