CVE-2026-3070

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2026-3070
A vulnerability was detected in SourceCodester Modern Image Gallery App 1.0. Affected by this vulnerability is an unknown functionality of the file upload.php. The manipulation of the argument filename results in cross site scripting. The attack may be launched remotely. The exploit is now public and may be used.

4.3 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact NONE

Integrity Impact LOW

Availability Impact NONE

Scope UNCHANGED

5.0 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:L/Au:N/C:N/I:P/A:N

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

References
Link Resource
https://github.com/tiancesec/CVE/issues/28 Exploit Issue Tracking Mitigation Third Party Advisory
https://vuldb.com/?ctiid.347425 Permissions Required VDB Entry
https://vuldb.com/?id.347425 Third Party Advisory VDB Entry
https://vuldb.com/?submit.757768 Third Party Advisory VDB Entry
https://www.sourcecodester.com/ Product
Configurations

Configuration 1 (hide)

cpe:2.3:a:remyandrade:modern_image_gallery_app:1.0:*:*:*:*:*:*:*
History

24 Feb 2026, 21:04

Type Values Removed Values Added
First Time Remyandrade
Remyandrade modern Image Gallery App
References () https://github.com/tiancesec/CVE/issues/28 - () https://github.com/tiancesec/CVE/issues/28 - Exploit, Issue Tracking, Mitigation, Third Party Advisory
References () https://vuldb.com/?ctiid.347425 - () https://vuldb.com/?ctiid.347425 - Permissions Required, VDB Entry
References () https://vuldb.com/?id.347425 - () https://vuldb.com/?id.347425 - Third Party Advisory, VDB Entry
References () https://vuldb.com/?submit.757768 - () https://vuldb.com/?submit.757768 - Third Party Advisory, VDB Entry
References () https://www.sourcecodester.com/ - () https://www.sourcecodester.com/ - Product
CPE cpe:2.3:a:remyandrade:modern_image_gallery_app:1.0:*:*:*:*:*:*:*
Summary
  • (es) Se detectó una vulnerabilidad en SourceCodester Modern Image Gallery App 1.0 que afecta a una funcionalidad desconocida del archivo upload.php. Si se manipula el argumento filename se puede provoar un cross-site scripting. El ataque puede lanzarse en remoto. El exploit ya es público y puede ser usado.

24 Feb 2026, 05:17

Type Values Removed Values Added
New CVE
Information

Published : 2026-02-24 05:17

Updated : 2026-02-24 21:04

NVD link : CVE-2026-3070

Mitre link : CVE-2026-3070

CVE.ORG link : CVE-2026-3070

JSON object : View

Products Affected

remyandrade

  • modern_image_gallery_app
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CWE-94

Improper Control of Generation of Code ('Code Injection')