CVE-2025-69990
CriticalSummary
phpgurukul News Portal Project V4.1 has an Arbitrary File Deletion Vulnerability in remove_file.php. The parameter file can cause any file to be deleted.
Risk Assessment
The vulnerability allows an attacker to delete critical system files or data, potentially leading to service disruption or data loss.
Recommendation
Update News Portal Project to a patched version or secure remove_file.php by validating file paths and requiring authentication.
Other vulnerabilities in phpgurukul News Portal Project
See all- CVE-2025-69992Critical
phpgurukul News Portal Project V4.1 has a File Upload Vulnerability via upload.php, which enables the upload of files of any format to the server without identity authentication.
- CVE-2025-69991Critical
phpgurukul News Portal Project V4.1 is vulnerable to SQL Injection in check_availablity.php.
Original NVD description (English source)
phpgurukul News Portal Project V4.1 has an Arbitrary File Deletion Vulnerability in remove_file.php. The parameter file can cause any file to be deleted.