Vulnerabilities

TI-2026-03187 CVE-2026-3695 · GHSA-8hfg-9c72-535r

SourceCodester Modern Image Gallery App delete.php path traversal

HIGH 70

A vulnerability has been found in SourceCodester Modern Image Gallery App 1.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00873 Published 2026-03-08 No fix listed CWE-22

TI-2026-02654 CVE-2026-3070 · GHSA-cxmx-5wwh-7p77

MEDIUM 57

A vulnerability was detected in SourceCodester Modern Image Gallery App 1.0.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00315 Published 2026-02-24 No fix listed CWE-79

TI-2025-43111 CVE-2025-70457

HIGH 82

A Remote Code Execution (RCE) vulnerability exists in Sourcecodester Modern Image Gallery App v1.0 within the gallery/upload.php component.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00905 Published 2026-01-23 No fix listed CWE-434