Lucene search
+L

6 matches found

CNVD
CNVD
added 2026/01/19 12:00 a.m.6 views

News Portal Project: Vulnerability Exposing Deleted Files

News Portal Project is a news portal project developed by PHPGurukul. The News Portal Project has a vulnerability regarding arbitrary file deletion. This vulnerability stems from improper handling of the 'file' parameter in the removefile.php file. Attackers can exploit this vulnerability to caus...

9.1CVSS5.9AI score0.00453EPSS
SaveExploits1
Cvelist
Cvelist
added 2026/01/13 12:00 a.m.37 views

CVE-2025-69990

phpgurukul News Portal Project V4.1 has an Arbitrary File Deletion Vulnerability in removefile.php. The parameter file can cause any file to be deleted...

0.00453EPSS
SaveExploits1References1
CVE
CVE
added 2026/01/13 12:00 a.m.26 views

CVE-2025-69990

CVE-2025-69990 affects the phpgurukul News Portal Project, version V4.1. The issue is an Arbitrary File Deletion vulnerability in remove_file.php where the input parameter file can be exploited to cause deletion of arbitrary files. The provided metrics indicate a critical impact (I and A) with hi...

9.1CVSS6.5AI score0.00453EPSS
SaveExploits1References1Affected Software1
Vulnrichment
Vulnrichment
added 2026/01/13 12:00 a.m.5 views

CVE-2025-69990

phpgurukul News Portal Project V4.1 has an Arbitrary File Deletion Vulnerability in removefile.php. The parameter file can cause any file to be deleted...

6.5AI score0.00453EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/09/17 10:45 p.m.11 views

CVE-2025-10481

A security vulnerability has been detected in SourceCodester Online Student File Management System 1.0. This impacts an unknown function of the file /removefile.php. The manipulation of the argument ID leads to sql injection. Remote exploitation of the attack is possible. The exploit has been...

8.8CVSS7AI score0.00418EPSS
SaveExploits1References1
OSV
OSV
added 2025/09/15 10:15 p.m.9 views

CVE-2025-10481

A security vulnerability has been detected in SourceCodester Online Student File Management System 1.0. This impacts an unknown function of the file /removefile.php. The manipulation of the argument ID leads to sql injection. Remote exploitation of the attack is possible. The exploit has been...

8.8CVSS5.7AI score0.00418EPSS
SaveExploits1References5
Rows per page
Query Builder