CVE-2026-108975

EUVD-2026-98315
A security flaw has been discovered in SourceCodester Library Management System 1.0. This vulnerability affects the function move_uploaded_file of the file admin/add_admin.php. Performing a manipulation of the argument image results in unrestricted upload. The attack may be initiated remotely. The exploit has been released to the public and may be used for attacks.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.3 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: 19.9%
Common Weakness Enumeration
References
https://tracexlabs.com/releases/lms-preauth-rce.html
https://vuldb.com/cve/CVE-2026-108975
https://vuldb.com/submit/1000549
https://vuldb.com/vuln/416794
https://vuldb.com/vuln/416794/cti
https://www.sourcecodester.com/