PT-2026-2578 · Phpgurukul · Phpgurukul News Portal Project

Published 2026-01-13 · Updated 2026-01-13 · CVE-2025-69992

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions phpgurukul News Portal Project version 4.1

Description The phpgurukul News Portal Project version 4.1 contains a file upload issue through the upload.php file. This allows for the upload of files in any format to the server without requiring authentication. The upload.php file does not verify the uploaded file type or content, potentially allowing malicious files to be stored and executed on the server.

Recommendations Apply updates to the phpgurukul News Portal Project version 4.1 to address the file upload issue in upload.php.

Exploit

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

CVE-2025-69992

Affected Products

Phpgurukul News Portal Project

References · 4

• 🔥 https://github.com/Y4y17/CVE/blob/main/News%20Portal%20Project/File%20upload%20vulnerability.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-69992 · Security Note
• https://osv.dev/vulnerability/CVE-2025-69992 · Vendor Advisory
• https://twitter.com/CVEnew/status/2011112413744017883 · Twitter Post