{"metadata": {"vulnerability": "cve-2026-108973", "count": 17, "kinds": {"milestone": 4, "sighting": 2, "kev": 0, "other": 11}}, "data": [{"timestamp": "2026-10-11T00:00:00Z", "date_only": false, "value": "2026-10-11T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / VulDB", "record": "cve-2026-108973", "field": "containers.cna.timeline.0.time"}, {"timestamp": "2026-10-11T02:00:00Z", "date_only": false, "value": "2026-10-11T02:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / VulDB", "record": "cve-2026-108973", "field": "containers.cna.timeline.1.time"}, {"timestamp": "2026-10-11T20:00:51.860Z", "date_only": false, "value": "2026-10-11T20:00:51.860Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2026-108973", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-11T22:05:57Z", "date_only": false, "value": "2026-10-11T22:05:57.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / VulDB", "record": "cve-2026-108973", "field": "containers.cna.timeline.2.time"}, {"timestamp": "2026-10-13T06:15:08.553Z", "date_only": false, "value": "2026-10-13T06:15:08.553Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2026-108973", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-13T06:15:08.553Z", "date_only": false, "value": "2026-10-13T06:15:08.553Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulDB", "record": "cve-2026-108973", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-13T06:41:31.322Z", "date_only": false, "value": "2026-10-13T06:41:31.322181Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117432234193091858", "record": "CVE-2026-108973", "field": "creation_timestamp", "uuid": "fce71484-da6d-4233-b995-fc5290c57747", "content": "CVE-2026-108973 SourceCodester Contact Tracing System Users.php move_uploaded_file unrestricted upload A vulnerability was determined in SourceCodester Contact Tracing System 1.0. Affected by this issue is the function move_uploaded_file of the file /classes/Users.php?f=save. This manipulation of the argument img/id causes unrestricted upload. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized.\nhttps://www.cve.org/CVERecord?id=CVE-2026-108973https://vuldb.com/vuln/416792https://vuldb.com/vuln/416792/ctihttps://vuldb.com/cve/CVE-2026-108973https://vuldb.com/submit/1000527https://tracexlabs.com/releases/contact-tracing-preauth-rce.htmlhttps://www.sourcecodester.com/#sourcecodester #SourceCodester #ContactTracingSystem#CVE_2026_108973#bot", "url": "https://infosec.exchange/users/cve/statuses/117432234193091858"}, {"timestamp": "2026-10-13T07:16:31Z", "date_only": false, "value": "2026-10-13T07:16:31Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-WQFP-RM4R-2HJ4", "record": "GHSA-WQFP-RM4R-2HJ4", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-13T07:16:31.290Z", "date_only": false, "value": "2026-10-13T07:16:31.290", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-108973", "record": "FKIE_CVE-2026-108973", "field": "published"}, {"timestamp": "2026-10-13T09:30:43Z", "date_only": false, "value": "2026-10-13T09:30:43Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-WQFP-RM4R-2HJ4", "record": "GHSA-WQFP-RM4R-2HJ4", "field": "published"}, {"timestamp": "2026-10-13T09:30:43Z", "date_only": false, "value": "2026-10-13T09:30:43Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-WQFP-RM4R-2HJ4", "record": "GHSA-WQFP-RM4R-2HJ4", "field": "modified"}, {"timestamp": "2026-10-13T13:25:26.466Z", "date_only": false, "value": "2026-10-13T13:25:26.466707Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2026-108973", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-13T13:25:26.466Z", "date_only": false, "value": "2026-10-13T13:25:26.466707Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-108973", "record": "FKIE_CVE-2026-108973", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-13T13:25:40.716Z", "date_only": false, "value": "2026-10-13T13:25:40.716Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2026-108973", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-13T13:25:40.716Z", "date_only": false, "value": "2026-10-13T13:25:40.716Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2026-108973", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-13T14:17:24.977Z", "date_only": false, "value": "2026-10-13T14:17:24.977", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-108973", "record": "FKIE_CVE-2026-108973", "field": "lastModified"}, {"timestamp": "2026-10-13T17:02:34.670Z", "date_only": false, "value": "2026-10-13T17:02:34.670456Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mxrj5y37ng2k", "record": "CVE-2026-108973", "field": "creation_timestamp", "uuid": "2943bfc7-39f5-41a5-9018-4bd2bea8e69f", "content": "SourceCodester Contact Tracing System 1.0\u306e/classes/Users.php?f=save\u306b\u304a\u3051\u308bmove_uploaded_file\u95a2\u6570\u306b\u8106\u5f31\u6027\u3002img\u2026\nCVE-2026-108973 CVSS 7.3 | HIGH", "url": "https://bsky.app/profile/postac001.bsky.social/post/3mxrj5y37ng2k"}]}