A vulnerability was found in PHPGurukul News Portal Project 4.1. This affects an unknown part of the file /news-details.php. The manipulation of the argument Co…

Published:

8 april 2026 om 22:00:00

Alert date:

9 april 2026 om 05:00:40

Source:

nvd.nist.gov

Web Technologies

A SQL injection vulnerability was discovered in PHPGurukul News Portal Project version 4.1. The vulnerability affects the /news-details.php file through manipulation of the Comment argument. The attack can be executed remotely and the exploit has been publicly disclosed. This vulnerability allows attackers to perform SQL injection attacks on the application database through the comment functionality.

Technical details

Mitigation steps:

Affected products:

PHPGurukul News Portal Project 4.1