Modern Image Gallery App
Approved changes feed: RSS · Atom
cpe:2.3:a:remyandrade:modern_image_gallery_app:1.0:*:*:*:*:*:*:*
part: a version: 1.0 update: *
| Vendor | Remyandrade (778e90e9-129a-5d15-ad71-c8bb9070dcc5) |
|---|---|
| Product | Modern Image Gallery App (9c784b92-7379-563a-a6a8-e0c40dd615d0) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-3695 |
vulnerable | 2026-06-03 15:23:33.332611 |
SourceCodester Modern Image Gallery App delete.php path traversal
MEDIUM (6.5)
A vulnerability has been found in SourceCodester Modern Image Gallery App 1.0. Impacted is an unknown function of the file /delete.php. Such manipulation of the argument filename leads to path traversal. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2026-03-08T00:32:10.583Z
Updated: 2026-03-11T16:27:29.121Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-3070 |
vulnerable | 2026-06-03 15:22:13.653157 |
SourceCodester Modern Image Gallery App upload.php cross site scripting
MEDIUM (4.3)
A vulnerability was detected in SourceCodester Modern Image Gallery App 1.0. Affected by this vulnerability is an unknown functionality of the file upload.php. The manipulation of the argument filename results in cross site scripting. The attack may be launched remotely. The exploit is now public and may be used.
Published: 2026-02-24T04:32:08.072Z
Updated: 2026-02-24T17:13:37.627Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-70457 |
vulnerable | 2026-06-03 15:12:29.681739 |
Details available
A Remote Code Execution (RCE) vulnerability exists in Sourcecodester Modern Image Gallery App v1.0 within the gallery/upload.php component. The application fails to properly validate uploaded file contents. Additionally, the application preserves the user-supplied file extension during the save process. This allows an unauthenticated attacker to upload arbitrary PHP code by spoofing the MIME type as an image, leading to full system compromise.
Published: 2026-01-23T00:00:00.000Z
Updated: 2026-01-26T15:44:45.929Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.