PT-2026-2578 · Phpgurukul · Phpgurukul News Portal Project
CVE-2025-69992
·
Publicado
2026-01-13
·
Atualizado
2026-01-13
CVSS v3.1
9.8
Crítica
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
phpgurukul News Portal Project version 4.1
Description
The phpgurukul News Portal Project version 4.1 contains a file upload issue through the
upload.php file. This allows for the upload of files in any format to the server without requiring authentication. The upload.php file does not verify the uploaded file type or content, potentially allowing malicious files to be stored and executed on the server.Recommendations
Apply updates to the phpgurukul News Portal Project version 4.1 to address the file upload issue in
upload.php.Exploit
Correção
Out of bounds Read
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Phpgurukul News Portal Project