Lucene search
+L

162 matches found

RedhatCVE
RedhatCVE
•added 2026/06/05 7:49 p.m.•21 views

CVE-2026-5839

A vulnerability was identified in PHPGurukul News Portal Project 4.1. This issue affects some unknown processing of the file /admin/add-subcategory.php. Such manipulation of the argument sucatdescription leads to sql injection. The attack may be launched remotely. The exploit is publicly availabl...

5.8CVSS5.5AI score0.00332EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/06/05 7:49 p.m.•24 views

CVE-2026-5840

A security flaw has been discovered in PHPGurukul News Portal Project 4.1. Impacted is an unknown function of the file /admin/checkavailability.php. Performing a manipulation of the argument Username results in sql injection. Remote exploitation of the attack is possible. The exploit has been...

5.8CVSS5.4AI score0.00332EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/06/05 7:49 p.m.•27 views

CVE-2026-5838

A vulnerability was determined in PHPGurukul News Portal Project 4.1. This vulnerability affects unknown code of the file /admin/add-subadmins.php. This manipulation of the argument sadminusername causes sql injection. The attack may be initiated remotely. The exploit has been publicly disclosed...

5.8CVSS5.5AI score0.00332EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/04/09 6:30 a.m.•18 views

EUVD-2026-20848

A vulnerability was identified in PHPGurukul News Portal Project 4.1. This issue affects some unknown processing of the file /admin/add-subcategory.php. Such manipulation of the argument sucatdescription leads to sql injection. The attack may be launched remotely. The exploit is publicly availabl...

5.8CVSS5.8AI score0.00332EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/04/09 6:30 a.m.•17 views

EUVD-2026-20849

A security flaw has been discovered in PHPGurukul News Portal Project 4.1. Impacted is an unknown function of the file /admin/checkavailability.php. Performing a manipulation of the argument Username results in sql injection. Remote exploitation of the attack is possible. The exploit has been...

5.8CVSS5.7AI score0.00332EPSS
SaveExploits0References6
attackerkb
attackerkb
•added 2026/04/09 4:00 a.m.•6 views

CVE-2026-5840

A security flaw has been discovered in PHPGurukul News Portal Project 4.1. Impacted is an unknown function of the file /admin/checkavailability.php. Performing a manipulation of the argument Username results in sql injection. Remote exploitation of the attack is possible. The exploit has been...

5.8CVSS5.7AI score0.00332EPSS
SaveExploits0References5Affected Software1
Vulnrichment
Vulnrichment
•added 2026/04/09 4:00 a.m.•14 views

CVE-2026-5840 PHPGurukul News Portal Project check_availability.php sql injection

A security flaw has been discovered in PHPGurukul News Portal Project 4.1. Impacted is an unknown function of the file /admin/checkavailability.php. Performing a manipulation of the argument Username results in sql injection. Remote exploitation of the attack is possible. The exploit has been...

5.8CVSS5.4AI score0.00332EPSS
SaveExploits0References5
CVE
CVE
•added 2026/04/09 4:00 a.m.•40 views

CVE-2026-5840

The CVE-2026-5840 entry concerns PHPGurukul News Portal Project 4.1. It specifies a SQL injection in an unknown function of /admin/check_availability.php arising from manipulation of the Username parameter, with remote exploitation possible. Public exploit is noted. No additional remediation step...

5.8CVSS5.4AI score0.00332EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/04/09 3:45 a.m.•46 views

CVE-2026-5839 PHPGurukul News Portal Project add-subcategory.php sql injection

A vulnerability was identified in PHPGurukul News Portal Project 4.1. This issue affects some unknown processing of the file /admin/add-subcategory.php. Such manipulation of the argument sucatdescription leads to sql injection. The attack may be launched remotely. The exploit is publicly availabl...

5.8CVSS0.00332EPSS
SaveExploits0References5
CVE
CVE
•added 2026/04/09 3:45 a.m.•32 views

CVE-2026-5839

The CVE-2026-5839 entry affects PHPGurukul News Portal Project 4.1, where the SQL injection arises from unsafely processing the sucatdescription parameter in /admin/add-subcategory.php. The vulnerability is triggered remotely and is associated with a publicly available exploit. The provided docum...

5.8CVSS5.5AI score0.00332EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2026/04/09 3:45 a.m.•6 views

CVE-2026-5839 PHPGurukul News Portal Project add-subcategory.php sql injection

A vulnerability was identified in PHPGurukul News Portal Project 4.1. This issue affects some unknown processing of the file /admin/add-subcategory.php. Such manipulation of the argument sucatdescription leads to sql injection. The attack may be launched remotely. The exploit is publicly availabl...

5.8CVSS5.5AI score0.00332EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2026/04/09 3:30 a.m.•10 views

CVE-2026-5838 PHPGurukul News Portal Project add-subadmins.php sql injection

A vulnerability was determined in PHPGurukul News Portal Project 4.1. This vulnerability affects unknown code of the file /admin/add-subadmins.php. This manipulation of the argument sadminusername causes sql injection. The attack may be initiated remotely. The exploit has been publicly disclosed...

5.8CVSS5.4AI score0.00332EPSS
SaveExploits0References5
CVE
CVE
•added 2026/04/09 3:30 a.m.•35 views

CVE-2026-5838

The CVE concerns PHPGurukul News Portal Project 4.1. A vulnerability exists in unknown code of the file /admin/add-subadmins.php where manipulation of the argument sadminusername leads to SQL injection. The attack may be initiated remotely, and the exploit has been publicly disclosed and may be u...

5.8CVSS5.4AI score0.00332EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/04/09 3:15 a.m.•53 views

CVE-2026-5837 PHPGurukul News Portal Project news-details.php sql injection

A vulnerability was found in PHPGurukul News Portal Project 4.1. This affects an unknown part of the file /news-details.php. The manipulation of the argument Comment results in sql injection. The attack can be launched remotely. The exploit has been made public and could be used...

7.5CVSS0.00411EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/09 12:00 a.m.•2 views

CVE-2026-5840: Improper Neutralization of Special Elements used in an SQL Command

A security flaw has been discovered in PHPGurukul News Portal Project 4.1. Impacted is an unknown function of the file /admin/checkavailability.php. Performing a manipulation of the argument Username results in sql injection. Remote exploitation of the attack is possible. The exploit has been...

5.8CVSS5.3AI score0.00332EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/09 12:00 a.m.•3 views

CVE-2026-5839: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was identified in PHPGurukul News Portal Project 4.1. This issue affects some unknown processing of the file /admin/add-subcategory.php. Such manipulation of the argument sucatdescription leads to sql injection. The attack may be launched remotely. The exploit is publicly availabl...

5.8CVSS5.4AI score0.00332EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/04/09 12:00 a.m.•24 views

PHPGurukul News Portal Project SQL注入漏洞

PHPGurukul News Portal Project is a news portal project of PHPGurukul Corporation. Version 4.1 of the PHPGurukul News Portal Project has a SQL injection vulnerability. This vulnerability arises from incorrect handling of the parameter sucatdescription in the file admin/add-subcategory.php, which...

5.8CVSS5.8AI score0.00332EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/09 12:00 a.m.•5 views

CVE-2026-5838: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was determined in PHPGurukul News Portal Project 4.1. This vulnerability affects unknown code of the file /admin/add-subadmins.php. This manipulation of the argument sadminusername causes sql injection. The attack may be initiated remotely. The exploit has been publicly disclosed...

5.8CVSS5.4AI score0.00332EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/04/09 12:00 a.m.•18 views

PT-2026-31581

Name of the Vulnerable Software and Affected Versions PHPGurukul News Portal Project version 4.1 Description A SQL injection issue exists in PHPGurukul News Portal Project 4.1 due to improper handling of input in the /admin/add-subcategory.php file. Manipulation of the sucatdescription argument c...

5.8CVSS5.8AI score0.00332EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2026/04/09 12:00 a.m.•19 views

PT-2026-31576

Name of the Vulnerable Software and Affected Versions PHPGurukul News Portal Project version 4.1 Description A flaw exists in PHPGurukul News Portal Project 4.1, specifically within the /news-details.php file. Manipulation of the Comment argument can lead to SQL injection. The attack can be...

7.5CVSS7AI score0.00411EPSS
SaveExploits0References10
Rows per page
Query Builder