Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: HaschekSolutions pictshare 3.7.1 Clear all filters
TI-2026-65780 CVE-2026-104356 · GHSA-6654-r2c2-m62r

PictShare < 3.7.1 Predictable Delete Code via rand()

Priority LOW 36

PictShare before version 3.7.1 contains a weak randomness vulnerability where the getRandomString() function uses the non-cryptographic rand() PRNG to generate the delete_code authorization token in src/inc/core.php.

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.0038 Published 2026-10-01 Fixed in 3.7.1 CWE-338
TI-2026-65771 CVE-2026-104051 · GHSA-8hvj-6v33-pcpf

PictShare < 3.7.1 Sensitive Information Disclosure via info API

Priority MEDIUM 45

PictShare before 3.7.1 contains an information disclosure vulnerability that allows unauthenticated attackers to obtain the secret delete_code and uploader metadata by calling the API::info() endpoint which returns the c…

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00484 Published 2026-10-01 Fixed in 3.7.1 CWE-522