CVE-2026-3695

Katalog CVE

CVSS 6.5 · Medium EPSS 0,92%

Kerentanan Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') pada remyandrade modern image gallery app. Skor CVSS 3.1 6.5 (Medium) menurut vuldb.com.

Deskripsi (NVD)

A vulnerability has been found in SourceCodester Modern Image Gallery App 1.0. Impacted is an unknown function of the file /delete.php. Such manipulation of the argument filename leads to path traversal. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

Rincian

Terbit di NVD

8 Maret 2026

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

6.5 (Medium), sumber vuldb.com
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

EPSS (30 hari)

0,92% peluang dieksploitasi; lebih tinggi dari 59,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://gist.github.com/hackusman/e618b915514ed24b9333c72152bb7218 exploit · advisory pihak ketiga
• https://gist.github.com/hackusman/e618b915514ed24b9333c72152bb7218#-detailed-proof-of-concept-poc exploit · advisory pihak ketiga
• https://vuldb.com/?id.349641 advisory pihak ketiga · vdb entry
• https://vuldb.com/?submit.765591 advisory pihak ketiga · vdb entry
• https://vuldb.com/?ctiid.349641 permissions required · vdb entry
• https://www.sourcecodester.com/ product