CVE Catalog
CVE-2025-69990
CriticalSummary
phpgurukul News Portal Project V4.1 has an Arbitrary File Deletion Vulnerability in remove_file.php. The parameter file can cause any file to be deleted.
Risk Assessment
The vulnerability allows an attacker to delete critical system files or data, potentially leading to service disruption or data loss.
Recommendation
Update News Portal Project to a patched version or secure remove_file.php by validating file paths and requiring authentication.
Original NVD description (English source)
phpgurukul News Portal Project V4.1 has an Arbitrary File Deletion Vulnerability in remove_file.php. The parameter file can cause any file to be deleted.