CVE-2026-19211

Name of the Vulnerable Software and Affected Versions SourceCodester Photo Share Website version 1.0

Description An issue exists in the /social/ajax.php?action=signup endpoint where manipulating the email argument allows for SQL injection, a technique used to interfere with the queries that an application makes to its database. This flaw enables remote exploitation.

Recommendations As a temporary workaround, avoid using the email parameter in the /social/ajax.php?action=signup endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.