Description
A security vulnerability has been detected in SourceCodester College Notes Gallery Management System 1.0. This impacts an unknown function of the file signup.php of the component Registration Flow. Such manipulation of the argument role leads to improper privilege management. The attack can be launched remotely. The exploit has been disclosed publicly and may be used.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SourceCodester | College Notes Gallery Management System | 1.0 | — |
References
- VDB-403413 | SourceCodester College Notes Gallery Management System Registration Flow signup.php privileges management vdb-entry technical-description
- VDB-403413 | CTI Indicators (IOB, IOC, TTP, IOA) signature permissions-required
- CVE-2026-90856 | CVE Analysis and Report third-party-advisory
- Submit #927252 | SourceCodester College Notes Gallery Management System using PHP with Source Code 1.0 Missing Authorization third-party-advisory
- https://github.com/Andyov0/cve/issues/4 exploit issue-tracking
- https://www.sourcecodester.com/ product