PT-2026-6993 · Itsourcecode · Itsourcecode News Portal Project

Wenzhuolin · Published 2026-02-08 · Updated 2026-02-10 · CVE-2026-2162

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions itsourcecode News Portal Project version 1.0

Description A flaw exists in itsourcecode News Portal Project 1.0 that allows for SQL injection. This issue is located in the /admin/aboutus.php file, specifically through manipulation of the pagetitle argument. The attack can be initiated remotely and has been publicly disclosed.

Recommendations Apply input validation and sanitization to the pagetitle argument in the /admin/aboutus.php file.

Exploit

Fix

SQL injection

Special Elements Injection

Weakness Enumeration

CWE-89

CWE-74

Related Identifiers

CVE-2026-2162

Affected Products

Itsourcecode News Portal Project

References · 11

• 🔥 https://github.com/Wzl731/test/issues/2 · Exploit
• https://osv.dev/vulnerability/CVE-2026-2162 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-2162 · Security Note
• https://vuldb.com/?submit.751083 · Note
• https://itsourcecode.com · Note
• https://twitter.com/CVEnew/status/2020542552978374940 · Twitter Post
• https://vuldb.com/?id.344864 · Note
• https://t.me/cveNotify/151537 · Telegram Post
• https://t.me/cveNotify/151308 · Telegram Post
• https://vuldb.com/?ctiid.344864 · Note
• https://t.me/CVEtracker/44111 · Telegram Post