Vulnerabilities

Filters

2 selected

13 records

Sort

Vendor: Mayuri K Component: Best Online News Portal Clear all filters

TI-2025-04224 CVE-2025-4728 · GHSA-2qvr-7jvg-p9jj

SourceCodester Best Online News Portal search.php sql injection

HIGH 70

A vulnerability was found in SourceCodester Best Online News Portal 1.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00603 Published 2025-05-15 No fix listed CWE-74

TI-2025-01620 CVE-2025-1875 · GHSA-9qc9-qw5g-vjpm

SQL injection vulnerability in 101news

MEDIUM 48

SQL injection vulnerability have been found in 101news affecting version 1.0 through the "searchtitle" parameter in search.php.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00421 Published 2025-03-03 No fix listed CWE-89

TI-2025-01619 CVE-2025-1874 · GHSA-w362-6935-wmpr

SQL injection vulnerability in 101news

MEDIUM 48

SQL injection vulnerability have been found in 101news affecting version 1.0 through the "description" parameter in admin/add-category.php.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00421 Published 2025-03-03 No fix listed CWE-89

TI-2025-01618 CVE-2025-1873 · GHSA-p66p-rjjv-9f55

SQL injection vulnerability in 101news

MEDIUM 48

SQL injection vulnerability have been found in 101news affecting version 1.0 through the "pagetitle" and "pagedescription" parameters in admin/contactus.php.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00421 Published 2025-03-03 No fix listed CWE-89

TI-2025-01617 CVE-2025-1872 · GHSA-rq8c-97x5-hqj8

SQL injection vulnerability in 101news

MEDIUM 48

SQL injection vulnerability have been found in 101news affecting version 1.0 through the "sadminusername" parameter in admin/add-subadmins.php.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00421 Published 2025-03-03 No fix listed CWE-89

TI-2025-01616 CVE-2025-1871 · GHSA-r6q3-vp6w-xwf9

SQL injection vulnerability in 101news

MEDIUM 48

SQL injection vulnerability have been found in 101news affecting version 1.0 through the "category" and "subcategory" parameters in admin/add-subcategory.php.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00421 Published 2025-03-03 No fix listed CWE-89

TI-2025-01615 CVE-2025-1870 · GHSA-vw87-rmj6-m6r2

SQL injection vulnerability in 101news

MEDIUM 42

SQL injection vulnerability have been found in 101news affecting version 1.0 through the "pagedescription" parameter in admin/aboutus.php.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00421 Published 2025-03-03 No fix listed CWE-89

TI-2025-01614 CVE-2025-1869 · GHSA-mq6j-52vj-xjq9

SQL injection vulnerability in 101news

MEDIUM 42

SQL injection vulnerability have been found in 101news affecting version 1.0 through the "username" parameter in admin/check_avalability.php.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00421 Published 2025-03-03 No fix listed CWE-89

TI-2024-08366 CVE-2024-9008 · GHSA-93wj-7hvc-6x5c

SourceCodester Best Online News Portal Comment Section news-details.php sql injection

MEDIUM 59

A vulnerability classified as critical was found in SourceCodester Best Online News Portal 1.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00644 Published 2024-09-19 No fix listed CWE-89

TI-2024-05546 CVE-2024-5985 · GHSA-765q-773v-w2f8

SourceCodester Best Online News Portal index.php sql injection

MEDIUM 57

A vulnerability classified as critical has been found in SourceCodester Best Online News Portal 1.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00561 Published 2024-06-14 No fix listed CWE-89

TI-2023-01845 CVE-2023-1962 · GHSA-cwj9-3phc-v686

SourceCodester Best Online News Portal POST Parameter forgot-password.php sql injection

HIGH 81

A vulnerability classified as critical was found in SourceCodester Best Online News Portal 1.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00812 Published 2023-04-09 No fix listed CWE-89

TI-2023-00745 CVE-2023-0785 · GHSA-6636-xfj2-vp52

SourceCodester Best Online News Portal check_availability.php information exposure

LOW 19

A vulnerability classified as problematic was found in SourceCodester Best Online News Portal 1.0.

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.00851 Published 2023-02-12 No fix listed CWE-202

TI-2023-00744 CVE-2023-0784 · GHSA-h54v-5w45-6g96

SourceCodester Best Online News Portal Login Page sql injection

MEDIUM 44

A vulnerability classified as critical has been found in SourceCodester Best Online News Portal 1.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00812 Published 2023-02-12 No fix listed CWE-89