PT-2026-6993 · Itsourcecode · Itsourcecode News Portal Project

Wenzhuolin · Publicado 2026-02-08 · Atualizado 2026-02-10 · CVE-2026-2162

Positive Technologies (AI Summary)

CVSS v3.1

7.2

Alta

Vetor base

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions itsourcecode News Portal Project version 1.0

Description A flaw exists in itsourcecode News Portal Project 1.0 that allows for SQL injection. This issue is located in the /admin/aboutus.php file, specifically through manipulation of the pagetitle argument. The attack can be initiated remotely and has been publicly disclosed.

Recommendations Apply input validation and sanitization to the pagetitle argument in the /admin/aboutus.php file.

Exploit

Correção

SQL injection

Special Elements Injection

Enumeração de Fraquezas

CWE-89

CWE-74

Identificadores relacionados

CVE-2026-2162

Produtos afetados

Itsourcecode News Portal Project

Referências · 11

• 🔥 https://github.com/Wzl731/test/issues/2 · Exploit
• https://vuldb.com/?submit.751083 · Nota
• https://itsourcecode.com · Nota
• https://twitter.com/CVEnew/status/2020542552978374940 · Publicação no Twitter
• https://vuldb.com/?id.344864 · Nota
• https://t.me/cveNotify/151537 · Publicação no Telegram
• https://t.me/cveNotify/151308 · Publicação no Telegram
• https://vuldb.com/?ctiid.344864 · Nota
• https://osv.dev/vulnerability/CVE-2026-2162 · Aviso do Fabricante
• https://t.me/CVEtracker/44111 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2026-2162 · Nota de Segurança