Vulnerabilidades do Itsourcecode News Portal Project
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Itsourcecode News Portal Project: 5 registro(s), com versões afetadas e correções.
CVE-2026-3164
Crítica · 9.8
CWE-89 25/02/2026
itsourcecode News Portal Project contactus.php sql injection
A vulnerability was found in itsourcecode News Portal Project 1.0. This issue affects some unknown processing of the file /admin/contactus.php. The manipulation of the argument pagetitle results in sql injection. It is possible to launch the attack remotely. The exploit has been made public and could be used.
CVE-2026-3135
Crítica · 9.8
CWE-89 24/02/2026
itsourcecode News Portal Project add-category.php sql injection
A weakness has been identified in itsourcecode News Portal Project 1.0. The impacted element is an unknown function of the file /admin/add-category.php. This manipulation of the argument Category causes sql injection. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks.
CVE-2026-3134
Crítica · 9.8
CWE-89 24/02/2026
itsourcecode News Portal Project edit-category.php sql injection
A security flaw has been discovered in itsourcecode News Portal Project 1.0. The affected element is an unknown function of the file /newsportal/admin/edit-category.php. The manipulation of the argument Category results in sql injection. The attack may be performed from remote. The exploit has been released to the public and may be used for attacks.
CVE-2026-2225
Crítica · 9.8
CWE-89 09/02/2026
Injeção de SQL no login administrativo do News Portal Project 1.0
Foi encontrada uma falha no itsourcecode News Portal Project 1.0. Essa vulnerabilidade afeta trecho de código desconhecido do arquivo /admin/index.php do componente Administrator Login. A manipulação do argumento email causa injeção de SQL. O ataque pode ser iniciado remotamente. O exploit foi publicado e pode ser utilizado.
CVE-2026-2162
Alta · 7.2
CWE-74 08/02/2026
itsourcecode News Portal Project aboutus.php sql injection
A vulnerability was determined in itsourcecode News Portal Project 1.0. This affects an unknown part of the file /admin/aboutus.php. This manipulation of the argument pagetitle causes sql injection. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized.