---
id: CVE-2026-109606
title: >-
  A vulnerability was detected in SourceCodester Art Gallery Management System
  1.0
summary: >-
  A vulnerability was detected in SourceCodester Art Gallery Management System
  1.0. This impacts the function Action::save_user of the file
  admin/admin_class.php of the component Account Creation. The manipulation of
  the argument Name resu…
severity: high
cvss: 7.3
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L'
cwe:
  - CWE-74
  - CWE-89
published: '2026-10-13'
updated: '2026-10-13'
sourceUpdated: '2026-10-13T19:26:24.643'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-109606'
references:
  - url: 'https://tracexlabs.com/releases/art-gallery-preauth-admin.html'
    label: cna@vuldb.com
  - url: 'https://vuldb.com/cve/CVE-2026-109606'
    label: cna@vuldb.com
  - url: 'https://vuldb.com/submit/1000552'
    label: cna@vuldb.com
  - url: 'https://vuldb.com/vuln/417229'
    label: cna@vuldb.com
  - url: 'https://vuldb.com/vuln/417229/cti'
    label: cna@vuldb.com
  - url: 'https://www.sourcecodester.com/'
    label: cna@vuldb.com
tags:
  - nvd
ingestedAt: '2026-10-13T17:38:53.180Z'
---

## Overview

A vulnerability was detected in SourceCodester Art Gallery Management System 1.0. This impacts the function Action::save_user of the file admin/admin_class.php of the component Account Creation. The manipulation of the argument Name results in sql injection. The attack may be performed from remote. The exploit is now public and may be used.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.