CVE-2026-2225: medium-severity vulnerability in itsourcecode News Portal Project
itsourcecode News Portal Project Administrator Login index.php sql injection
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 6.9epss 0.5%
A flaw has been found in itsourcecode News Portal Project 1.0. This vulnerability affects unknown code of the file /admin/index.php of the component Administrator Login. This manipulation of the argument email causes sql injection. The attack can be initiated remotely. The exploit has been published and may be used.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Affected products
itsourcecode · News Portal ProjectRelated CVEs — itsourcecode News Portal Project
In the same product, most dangerous first.
CVE-2026-3164MEDIUMitsourcecode News Portal Project contactus.php sql injectionEPSS 0.4%CVE-2026-3135MEDIUMitsourcecode News Portal Project add-category.php sql injectionEPSS 0.4%CVE-2026-3134MEDIUMitsourcecode News Portal Project edit-category.php sql injectionEPSS 0.4%CVE-2026-2162MEDIUMitsourcecode News Portal Project aboutus.php sql injectionEPSS 0.4%