Lucene search
+L

3 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/09 12:00 a.m.•9 views

CVE-2026-5839: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was identified in PHPGurukul News Portal Project 4.1. This issue affects some unknown processing of the file /admin/add-subcategory.php. Such manipulation of the argument sucatdescription leads to sql injection. The attack may be launched remotely. The exploit is publicly availabl...

5.8CVSS5.4AI score0.00332EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/03 12:00 a.m.•10 views

CVE-2025-1871: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability have been found in 101news affecting version 1.0 through the "category" and "subcategory" parameters in admin/add-subcategory.php...

9.8CVSS5.8AI score0.00421EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/03/03 12:00 a.m.•10 views

PT-2025-9320

Name of the Vulnerable Software and Affected Versions 101news versions 1.0 Description A SQL injection issue has been found, affecting the "category" and subcategory parameters in the admin/add-subcategory.php file. Recommendations For version 1.0, avoid using the category and subcategory...

9.8CVSS0.00421EPSS
SaveExploits0References7
Rows per page
Query Builder