CVE-2026-19211
HighCVSS 7.3Exploitation Probability (EPSS)
Low risk18th percentile - higher than 18% of all known CVEs
Summary
A vulnerability was found in SourceCodester Photo Share Website 1.0. It affects an unknown function in the file /social/ajax.php?action=signup. Manipulation of the email argument results in SQL injection. Remote exploitation is possible. The exploit has been made public and could be used.
Risk Assessment
Successful exploitation could allow an attacker to manipulate the database, steal data, or gain unauthorized access. Since the exploit is public, the risk of attack is high.
Recommendation
Update or patch the application immediately to protect against SQL injection. Also validate inputs and use parameterized queries.
Other vulnerabilities in SourceCodester Photo Share Website
See all- CVE-2026-19230Low
A vulnerability in SourceCodester Photo Share Website 1.0 affects an unknown part of the file /social/ajax.php?action=save_upload of the Comment Input Box component. Manipulation of the content argument leads to cross site scripting. The attack may be initiated remotely, and the exploit is publicly available.
- CVE-2026-19210Medium
A vulnerability was found in SourceCodester Photo Share Website 1.0 in an unknown function of the file /social/ajax.php?action=save_upload. Manipulation of the img[]/imgName[] arguments leads to unrestricted upload. The attack can be launched remotely and the exploit has been publicly disclosed.
- CVE-2026-19209Low
A cross-site scripting vulnerability was found in SourceCodester Photo Share Website 1.0 in an unknown function of the file /social/index.php?page=home. Manipulation of the Comment argument causes XSS. The attack can be initiated remotely and the exploit is public.
Original NVD description (English source)
A vulnerability was found in SourceCodester Photo Share Website 1.0. This affects an unknown function of the file /social/ajax.php?action=signup. Performing a manipulation of the argument email results in sql injection. Remote exploitation of the attack is possible. The exploit has been made public and could be used.