CVE-2026-109606

7.3 HIGH

Published 2026-10-13 · Updated 2026-10-13

AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.

NVD description

A vulnerability was detected in SourceCodester Art Gallery Management System 1.0. This impacts the function Action::save_user of the file admin/admin_class.php of the component Account Creation. The manipulation of the argument Name results in sql injection. The attack may be performed from remote. The exploit is now public and may be used.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Weaknesses

CWE-74, CWE-89

All references

https://tracexlabs.com/releases/art-gallery-preauth-admin.html
https://vuldb.com/cve/CVE-2026-109606
https://vuldb.com/submit/1000552
https://vuldb.com/vuln/417229
https://vuldb.com/vuln/417229/cti
https://www.sourcecodester.com/

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

MEDIUMCVE-2026-100312PoC
HIGHCVE-2026-100314PoC
HIGHCVE-2026-100315PoC
HIGHCVE-2026-100739PoC
HIGHCVE-2026-100874PoC
HIGHCVE-2026-100875PoC
MEDIUMCVE-2026-100887PoC
MEDIUMCVE-2026-100894PoC

Related by shared AI tags and CWE weakness class. Browse the full archive.