Vulnerabilities

TI-2026-01122 CVE-2026-1424 · GHSA-jxwq-p5r5-4484

PHPGurukul News Portal Profile Pic unrestricted upload

MEDIUM 56

A vulnerability was identified in PHPGurukul News Portal 1.0.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.00467 Published 2026-01-26 No fix listed CWE-284

TI-2026-00870 CVE-2026-1142 · GHSA-w98p-2mg7-6p5x

PHPGurukul News Portal cross-site request forgery

MEDIUM 57

A security flaw has been discovered in PHPGurukul News Portal 1.0.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00235 Published 2026-01-19 No fix listed CWE-352

TI-2026-00869 CVE-2026-1141 · GHSA-j6q4-mvcw-hpgm

PHPGurukul News Portal Add Sub-Admin add-subadmins.php improper authorization

MEDIUM 57

A vulnerability was identified in PHPGurukul News Portal 1.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.0035 Published 2026-01-19 No fix listed CWE-266

TI-2025-42983 CVE-2025-69992 · GHSA-7vx5-3h3f-34xj

phpgurukul News Portal Project V4.1 has File Upload Vulnerability via upload.php, which…

MEDIUM 50

phpgurukul News Portal Project V4.1 has File Upload Vulnerability via upload.php, which enables the upload of files of any format to the server without identity authentication.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00582 Published 2026-01-13 No fix listed CWE-125

TI-2025-42982 CVE-2025-69991 · GHSA-p885-9jgr-449p

phpgurukul News Portal Project V4.1 is vulnerable to SQL Injection in check_availablity.php.

MEDIUM 49

phpgurukul News Portal Project V4.1 is vulnerable to SQL Injection in check_availablity.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00467 Published 2026-01-13 No fix listed CWE-89

TI-2025-42981 CVE-2025-69990 · GHSA-99w3-wm8p-h383

phpgurukul News Portal Project V4.1 has an Arbitrary File Deletion Vulnerability in…

HIGH 72

phpgurukul News Portal Project V4.1 has an Arbitrary File Deletion Vulnerability in remove_file.php.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00463 Published 2026-01-13 No fix listed CWE-552

TI-2025-11570 CVE-2025-12616 · GHSA-pcp2-9pj8-878j

PHPGurukul News Portal settings.py insertion of sensitive information into debugging code

MEDIUM 61

A vulnerability was detected in PHPGurukul News Portal 1.0.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00588 Published 2025-11-03 No fix listed CWE-200

TI-2025-11569 CVE-2025-12615 · GHSA-q2gf-mw7m-x2mr

PHPGurukul News Portal settings.py hard-coded key

MEDIUM 45

A security vulnerability has been detected in PHPGurukul News Portal 1.0.

CVSS 4.0LOW 2.3 Network No auth User interaction EPSS 0.00417 Published 2025-11-03 No fix listed CWE-320

TI-2025-04372 CVE-2025-4880 · GHSA-w5x3-j5vg-94wj

PHPGurukul News Portal aboutus.php sql injection

HIGH 70

A vulnerability has been found in PHPGurukul News Portal 4.1 and classified as critical.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00631 Published 2025-05-18 No fix listed CWE-74

TI-2025-04366 CVE-2025-4874 · GHSA-57ff-cj28-pc38

PHPGurukul News Portal Project contactus.php sql injection

HIGH 70

A vulnerability was found in PHPGurukul News Portal Project 4.1 and classified as critical.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00631 Published 2025-05-18 No fix listed CWE-74

TI-2025-04365 CVE-2025-4873 · GHSA-9qq5-w3c8-q244

PHPGurukul News Portal Login index.php sql injection

HIGH 70

A vulnerability has been found in PHPGurukul News Portal 4.1 and classified as critical.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00631 Published 2025-05-18 No fix listed CWE-74

TI-2025-01604 CVE-2025-1859 · GHSA-hrw5-976x-g3p6

PHPGurukul News Portal login.php sql injection

MEDIUM 64

A vulnerability, which was classified as critical, has been found in PHPGurukul News Portal 4.1.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00489 Published 2025-03-03 No fix listed CWE-74

TI-2021-15644 CVE-2021-37808 · GHSA-qfcq-9pvg-2c2j

SQL Injection vulnerabilities exist in https://phpgurukul.com News Portal Project 3.1 via…

LOW 30

SQL Injection vulnerabilities exist in https://phpgurukul.com News Portal Project 3.1 via the (1) category, (2) subcategory, (3) sucatdescription, and (4) username parameters, the server response is about (N) seconds del…

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.01855 Published 2021-10-27 No fix listed CWE-89

Vulnerabilities

Filters