Threat Intelligence Database

CVE-2026-5840 is a medium severity SQL injection vulnerability in PHPGurukul News Portal Project version 4.1. The flaw exists in an unknown function within /admin/check_availability.php, where manipulation of the Username argument can lead to SQL injection. This vulnerability allows remote attackers to potentially execute unauthorized SQL commands. Although an exploit has been publicly released, there are no known exploits observed in the wild yet. No official patch or remediation guidance has been provided by the vendor at this time.

CVE-2026-5839 is a medium severity SQL injection vulnerability in PHPGurukul News Portal Project version 4.1. It arises from improper handling of the sucatdescription parameter in the /admin/add-subcategory.php file, allowing remote attackers with high privileges to manipulate SQL queries. The vulnerability has a CVSS 4.0 base score of 5.1. No official patch or remediation guidance is currently available, and no known exploits are reported in the wild.

CVE-2026-5838 is a medium severity SQL injection vulnerability in PHPGurukul News Portal Project version 4.1. It affects the /admin/add-subadmins.php file, where manipulation of the sadminusername parameter can lead to SQL injection. The vulnerability can be exploited remotely without user interaction. Although the exploit has been publicly disclosed, there are no known exploits in the wild at this time. No official patch or remediation guidance has been provided by the vendor yet.

A vulnerability was found in PHPGurukul News Portal Project 4.1. This affects an unknown part of the file /news-details.php. The manipulation of the argument Comment results in sql injection. The attack can be launched remotely. The exploit has been made public and could be used.

A weakness has been identified in itsourcecode News Portal Project 1.0. The impacted element is an unknown function of the file /admin/add-category.php. This manipulation of the argument Category causes sql injection. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks.

MediumVulnerabilityUnited StatesIndiaGermany+7#cve#cve-2026-3135

A security flaw has been discovered in itsourcecode News Portal Project 1.0. The affected element is an unknown function of the file /newsportal/admin/edit-category.php. The manipulation of the argument Category results in sql injection. The attack may be performed from remote. The exploit has been released to the public and may be used for attacks.

MediumVulnerabilityUnited StatesIndiaGermany+7#cve#cve-2026-3134

A vulnerability was determined in itsourcecode News Portal Project 1.0. This affects an unknown part of the file /admin/aboutus.php. This manipulation of the argument pagetitle causes sql injection. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized.

MediumVulnerabilityUnited StatesIndiaGermany+7#cve#cve-2026-2162