CVE-2026-3695mediumCWE-22

CVE-2026-3695: falha de média gravidade em SourceCodester Modern Image Gallery App

SourceCodester Modern Image Gallery App delete.php path traversal

Publicada em 08 mar 2026 · Atualizada em 11 mar 2026

Seguir esta CVE + Monitorar Modern Image Gallery App

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 6.9epss 0.9%

A vulnerability has been found in SourceCodester Modern Image Gallery App 1.0. Impacted is an unknown function of the file /delete.php. Such manipulation of the argument filename leads to path traversal. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

Produtos afetados

SourceCodester · Modern Image Gallery App

CVEs relacionadas — SourceCodester Modern Image Gallery App

No mesmo produto, das mais perigosas para as menos.

CVE-2026-3070MEDIUMSourceCodester Modern Image Gallery App upload.php cross site scriptingEPSS 0.3%

Referências

https://gist.github.com/hackusman/e618b915514ed24b9333c72152bb7218 https://gist.github.com/hackusman/e618b915514ed24b9333c72152bb7218#-detailed-proof-of-concept-poc https://vuldb.com/?ctiid.349641 https://vuldb.com/?id.349641 https://vuldb.com/?submit.765591 https://www.sourcecodester.com/