CVE-2026-5839

PHPGurukul News Portal Project add-subcategory.php sql injection

CVSS 5.1 MEDIUMEPSS 0.2%CWE-74 CWE-89

A vulnerability was identified in PHPGurukul News Portal Project 4.1. This issue affects some unknown processing of the file /admin/add-subcategory.php. Such manipulation of the argument sucatdescription leads to sql injection. The attack may be launched remotely. The exploit is publicly available and might be used.

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

Affected products

PHPGurukul · News Portal Project

public PoCs found — 1

cve_referencegithub.com/f1rstb100d/CVE/issues/28unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://github.com/f1rstb100d/CVE/issues/28 https://phpgurukul.com/https://vuldb.com/submit/789912 https://vuldb.com/vuln/356295 https://vuldb.com/vuln/356295/cti