Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2024-3768

PHPGurukul/itsourcecode News Portal search.php sql injection

Description

A vulnerability, which was classified as critical, has been found in PHPGurukul/itsourcecode News Portal 4.1. This issue affects some unknown processing of the file search.php. The manipulation of the argument searchtitle leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-260615.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

PHPGurukul News Portal

  • 4.1affected

itsourcecode News Portal

  • 4.1affected

References