News portal

This hub aggregates every CVE we track for News portal, a product in the enterprise software space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 15 most recently published vulnerabilities affecting News portal.

• CVE-2026-1424PHPGurukul News Portal Profile Pic unrestricted upload4.7Jan 26, 2026
• CVE-2026-1142PHPGurukul News Portal cross-site request forgery4.3Jan 19, 2026
• CVE-2026-1141PHPGurukul News Portal Add Sub-Admin add-subadmins.php improper authorization6.3Jan 19, 2026
• CVE-2025-69990phpgurukul News Portal Project V4.1 has an Arbitrary File Deletion Vulnerability in remove_file.php. The parameter file can cause any file to be deleted.9.1Jan 13, 2026
• CVE-2025-69991phpgurukul News Portal Project V4.1 is vulnerable to SQL Injection in check_availablity.php.9.8Jan 13, 2026
• CVE-2025-69992phpgurukul News Portal Project V4.1 has File Upload Vulnerability via upload.php, which enables the upload of files of any format to the server without identity authentication.9.8Jan 13, 2026
• CVE-2025-12616PHPGurukul News Portal settings.py insertion of sensitive information into debugging code3.7Nov 3, 2025
• CVE-2025-12615PHPGurukul News Portal settings.py hard-coded key5.0Nov 3, 2025
• CVE-2025-5370PHPGurukul News Portal forgot-password.php sql injection7.3May 31, 2025
• CVE-2025-4880PHPGurukul News Portal aboutus.php sql injection7.3May 18, 2025
• CVE-2025-4874PHPGurukul News Portal Project contactus.php sql injection7.3May 18, 2025
• CVE-2025-4873PHPGurukul News Portal Login index.php sql injection7.3May 18, 2025
• CVE-2025-1859PHPGurukul News Portal login.php sql injection7.3Mar 3, 2025
• CVE-2024-3768PHPGurukul/itsourcecode News Portal search.php sql injection6.3Apr 15, 2024
• CVE-2024-3767PHPGurukul News Portal edit-post.php sql injection6.3Apr 15, 2024