sourcecodester contact tracing system vulnerabilities

Latest sourcecodester contact tracing system CVEs

Newest publication first

1. CVE-2026-108973 SourceCodester Contact Tracing System Users.php move_uploaded_file unrestricted upload

   Published 2026-10-13

   Medium·CVSS 6.9 EPSS 0.29%

   A vulnerability was determined in SourceCodester Contact Tracing System 1.0. Affected by this issue is the function move_uploaded_file of the file /classes/Users.php?f=save. This manipulation of the argument img/id causes unrestricted upload. The attack can be initiated remotely....

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.