PT-2026-31581 · Phpgurukul · News Portal Project

Published 2026-04-09 · Updated 2026-04-09 · CVE-2026-5839

NVD

CVSS v2.0

5.8

Medium

AV:N/AC:L/Au:M/C:P/I:P/A:P

A vulnerability was identified in PHPGurukul News Portal Project 4.1. This issue affects some unknown processing of the file /admin/add-subcategory.php. Such manipulation of the argument sucatdescription leads to sql injection. The attack may be launched remotely. The exploit is publicly available and might be used.

Exploit

Fix

SQL injection

Special Elements Injection

Weakness Enumeration

CWE-89

CWE-74

Related Identifiers

CVE-2026-5839

Affected Products

News Portal Project

References · 6

• 🔥 https://github.com/f1rstb100d/CVE/issues/28 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-5839 · Security Note
• https://phpgurukul.com · Note
• https://vuldb.com/submit/789912 · Note
• https://vuldb.com/vuln/356295 · Note
• https://vuldb.com/vuln/356295/cti · Note