PT-2026-31580 · Phpgurukul · News Portal Project

Published 2026-04-09 · Updated 2026-04-09 · CVE-2026-5838

Mitre

CVSS v3.1

4.7

Medium

AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

A vulnerability was determined in PHPGurukul News Portal Project 4.1. This vulnerability affects unknown code of the file /admin/add-subadmins.php. This manipulation of the argument sadminusername causes sql injection. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized.

Exploit

Fix

SQL injection

Special Elements Injection

Weakness Enumeration

CWE-89

CWE-74

Related Identifiers

CVE-2026-5838

Affected Products

News Portal Project

References · 6

• 🔥 https://github.com/f1rstb100d/CVE/issues/27 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-5838 · Security Note
• https://vuldb.com/vuln/356294/cti · Note
• https://vuldb.com/vuln/356294 · Note
• https://phpgurukul.com · Note
• https://vuldb.com/submit/789908 · Note