GCVE - cpe:2.3:a:phpgurukul:news_portal:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:phpgurukul:news_portal:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Phpgurukul (`43390843-85b8-5d5e-9218-29dc10c3657d`)
Product	News Portal (`95c43179-24cd-5906-99b2-eaddff407cc0`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2026-1424`	vulnerable	2026-06-08 07:49:08.534514	PHPGurukul News Portal Profile Pic unrestricted upload MEDIUM (4.7) A vulnerability was identified in PHPGurukul News Portal 1.0. This affects an unknown part of the component Profile Pic Handler. The manipulation leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit is publicly available and might be used. Published: 2026-01-26T07:02:07.123Z Updated: 2026-02-23T08:57:53.045Z Open on db.gcve.eu Reference links https://vuldb.com/?id.342840 https://vuldb.com/?ctiid.342840 https://vuldb.com/?submit.736637 https://github.com/rsecroot/News-Portal/blob/main/Cross%20Site%20Scripting.md https://phpgurukul.com/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-1142`	vulnerable	2026-06-08 07:47:14.378473	PHPGurukul News Portal cross-site request forgery MEDIUM (4.3) A security flaw has been discovered in PHPGurukul News Portal 1.0. The impacted element is an unknown function. Performing a manipulation results in cross-site request forgery. The attack may be initiated remotely. The exploit has been released to the public and may be used for attacks. Published: 2026-01-19T06:32:07.733Z Updated: 2026-02-23T08:43:11.586Z Open on db.gcve.eu Reference links https://vuldb.com/?id.341734 https://vuldb.com/?ctiid.341734 https://vuldb.com/?submit.735498 https://github.com/Asim-QAZi/CSRF-Add-Subadmin-in-News-Portal-Project-in-PHP-and-MySql-in-PHPGurukul https://phpgurukul.com/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-1141`	vulnerable	2026-06-08 07:47:14.376873	PHPGurukul News Portal Add Sub-Admin add-subadmins.php improper authorization MEDIUM (6.3) A vulnerability was identified in PHPGurukul News Portal 1.0. The affected element is an unknown function of the file /admin/add-subadmins.php of the component Add Sub-Admin Page. Such manipulation leads to improper authorization. The attack can be launched remotely. The exploit is publicly available and might be used. Published: 2026-01-19T06:02:07.574Z Updated: 2026-02-23T08:42:58.178Z Open on db.gcve.eu Reference links https://vuldb.com/?id.341733 https://vuldb.com/?ctiid.341733 https://vuldb.com/?submit.735483 https://vuldb.com/?submit.736668 https://github.com/Asim-QAZi/BrokenAccessControl-News-Portal-Project-in-PHP-and-MySQL-in-PHPGurukul	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-5370`	vulnerable	2026-06-08 07:35:24.793170	PHPGurukul News Portal forgot-password.php sql injection HIGH (7.3) A vulnerability classified as critical was found in PHPGurukul News Portal 4.1. Affected by this vulnerability is an unknown functionality of the file /admin/forgot-password.php. The manipulation of the argument Username leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Published: 2025-05-31T05:31:05.427Z Updated: 2025-06-02T15:49:58.789Z Open on db.gcve.eu Reference links https://vuldb.com/?id.310663 https://vuldb.com/?ctiid.310663 https://vuldb.com/?submit.587365 https://github.com/GarminYoung/myCVE/issues/5 https://phpgurukul.com/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-4880`	vulnerable	2026-06-08 07:29:17.454120	PHPGurukul News Portal aboutus.php sql injection HIGH (7.3) A vulnerability has been found in PHPGurukul News Portal 4.1 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/aboutus.php. The manipulation of the argument pagetitle leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Published: 2025-05-18T13:00:09.485Z Updated: 2025-05-19T14:16:31.605Z Open on db.gcve.eu Reference links https://vuldb.com/?id.309433 https://vuldb.com/?ctiid.309433 https://vuldb.com/?submit.576264 https://github.com/Schatten-42/MyCVE/issues/8 https://phpgurukul.com/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-4873`	vulnerable	2026-06-08 07:29:17.441707	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-1859`	vulnerable	2026-06-08 07:08:38.358190	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-12616`	vulnerable	2026-06-08 07:04:30.527212	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-12615`	vulnerable	2026-06-08 07:04:30.525128	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-3768`	vulnerable	2026-06-08 06:43:51.483075	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-3767`	vulnerable	2026-06-08 06:43:51.481627	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.