CVE-2025-69991
CriticalSummary
phpgurukul News Portal Project V4.1 is vulnerable to SQL Injection in check_availablity.php.
Risk Assessment
SQL Injection vulnerability could allow an attacker to manipulate the database, steal data, bypass authentication, or perform unauthorized operations.
Recommendation
Update News Portal Project to a patched version or implement parameterized queries and input validation in check_availablity.php.
Other vulnerabilities in phpgurukul News Portal Project
See all- CVE-2025-69992Critical
phpgurukul News Portal Project V4.1 has a File Upload Vulnerability via upload.php, which enables the upload of files of any format to the server without identity authentication.
- CVE-2025-69990Critical
phpgurukul News Portal Project V4.1 has an Arbitrary File Deletion Vulnerability in remove_file.php. The parameter file can cause any file to be deleted.
Original NVD description (English source)
phpgurukul News Portal Project V4.1 is vulnerable to SQL Injection in check_availablity.php.