CVE-2026-90856
HighCVSS 7.3Summary
A vulnerability has been detected in SourceCodester College Notes Gallery Management System 1.0. It affects an unknown function in the signup.php file of the Registration Flow component. Manipulation of the role argument leads to improper privilege management. The attack can be launched remotely, and the exploit has been publicly disclosed.
Risk Assessment
Risk of unauthorized privilege escalation, potentially allowing an attacker to gain unauthorized access to administrative functions.
Recommendation
Immediately restrict access to signup.php and apply vendor patches. Also implement server-side role validation.
Other vulnerabilities in SourceCodester College Notes Gallery Management System
See all- CVE-2026-90857Medium
A vulnerability was detected in SourceCodester College Notes Gallery Management System 1.0. It affects an unknown function in /dashboard/userprofile.php of the Profile Upload component. Manipulation of the image argument results in unrestricted upload. The attack can be initiated remotely, and the exploit is public.
- CVE-2026-90849High
A security vulnerability has been detected in SourceCodester College Notes Gallery Management System 1.0. It affects an unknown functionality in the /College/login.php file. Manipulation of the User argument leads to SQL injection. The attack may be initiated remotely, and the exploit has been publicly disclosed.
Original NVD description (English source)
A security vulnerability has been detected in SourceCodester College Notes Gallery Management System 1.0. This impacts an unknown function of the file signup.php of the component Registration Flow. Such manipulation of the argument role leads to improper privilege management. The attack can be launched remotely. The exploit has been disclosed publicly and may be used.