CVE-2026-108973 | SourceCodester Contact Tracing System 1.0 Users.php?f=save move_uploaded_file img/id unrestricted upload

October 11, 2026 Yanac

A vulnerability marked as critical has been reported in SourceCodester Contact Tracing System 1.0. Affected by this issue is the function move_uploaded_file of the file /classes/Users.php?f=save. This manipulation of the argument img/id causes unrestricted upload.

This vulnerability is handled as CVE-2026-108973. The attack can be initiated remotely. Additionally, an exploit exists.VulDB Recent EntriesRead More