CVE Catalog

CVE-2025-69991

Critical
Published: Translated: NVD NIST

Summary

phpgurukul News Portal Project V4.1 is vulnerable to SQL Injection in check_availablity.php.

Risk Assessment

SQL Injection vulnerability could allow an attacker to manipulate the database, steal data, bypass authentication, or perform unauthorized operations.

Recommendation

Update News Portal Project to a patched version or implement parameterized queries and input validation in check_availablity.php.

Original NVD description (English source)

phpgurukul News Portal Project V4.1 is vulnerable to SQL Injection in check_availablity.php.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS