Best Online News Portal

best_online_news_portal

Vendor: Mayurik • 13 CVEs

CVEs (13)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2025-4728 1Mayurik 1Best Online News Portal Jun 17, 2026 May 15, 2025 6.9 MEDIUM· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 A vulnerability was found in SourceCodester Best Online News Portal 1.0. It has been classified as critical. Affected is an unknown function of the file /search.php. The manipulation of the argument searchtitle leads to...Show more A vulnerability was found in SourceCodester Best Online News Portal 1.0. It has been classified as critical. Affected is an unknown function of the file /search.php. The manipulation of the argument searchtitle leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.Show less
CVE-2025-1875 1Mayurik 1Best Online News Portal Jun 17, 2026 Mar 3, 2025 9.3 CRITICAL· v4 9.8 CRITICAL· v3 N/A· v2 SQL injection vulnerability have been found in 101news affecting version 1.0 through the "searchtitle" parameter in search.php.
CVE-2025-1874 1Mayurik 1Best Online News Portal Jun 17, 2026 Mar 3, 2025 9.3 CRITICAL· v4 9.8 CRITICAL· v3 N/A· v2 SQL injection vulnerability have been found in 101news affecting version 1.0 through the "description" parameter in admin/add-category.php.
CVE-2025-1873 1Mayurik 1Best Online News Portal Jun 17, 2026 Mar 3, 2025 9.3 CRITICAL· v4 9.8 CRITICAL· v3 N/A· v2 SQL injection vulnerability have been found in 101news affecting version 1.0 through the "pagetitle" and "pagedescription" parameters in admin/contactus.php.
CVE-2025-1872 1Mayurik 1Best Online News Portal Jun 17, 2026 Mar 3, 2025 9.3 CRITICAL· v4 9.8 CRITICAL· v3 N/A· v2 SQL injection vulnerability have been found in 101news affecting version 1.0 through the "sadminusername" parameter in admin/add-subadmins.php.
CVE-2025-1871 1Mayurik 1Best Online News Portal Jun 17, 2026 Mar 3, 2025 9.3 CRITICAL· v4 9.8 CRITICAL· v3 N/A· v2 SQL injection vulnerability have been found in 101news affecting version 1.0 through the "category" and "subcategory" parameters in admin/add-subcategory.php.
CVE-2025-1870 1Mayurik 1Best Online News Portal Jun 17, 2026 Mar 3, 2025 9.3 CRITICAL· v4 9.8 CRITICAL· v3 N/A· v2 SQL injection vulnerability have been found in 101news affecting version 1.0 through the "pagedescription" parameter in admin/aboutus.php.
CVE-2025-1869 1Mayurik 1Best Online News Portal Jun 17, 2026 Mar 3, 2025 9.3 CRITICAL· v4 9.8 CRITICAL· v3 N/A· v2 SQL injection vulnerability have been found in 101news affecting version 1.0 through the "username" parameter in admin/check_avalability.php.
CVE-2024-9008 1Mayurik 1Best Online News Portal Jun 17, 2026 Sep 19, 2024 5.3 MEDIUM· v4 9.8 CRITICAL· v3 6.5 MEDIUM· v2 A vulnerability classified as critical was found in SourceCodester Best Online News Portal 1.0. This vulnerability affects unknown code of the file /news-details.php of the component Comment Section. The manipulation of...Show more A vulnerability classified as critical was found in SourceCodester Best Online News Portal 1.0. This vulnerability affects unknown code of the file /news-details.php of the component Comment Section. The manipulation of the argument name leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.Show less
CVE-2024-5985 1Mayurik 1Best Online News Portal Jun 17, 2026 Jun 14, 2024 5.3 MEDIUM· v4 8.8 HIGH· v3 6.5 MEDIUM· v2 A vulnerability classified as critical has been found in SourceCodester Best Online News Portal 1.0. This affects an unknown part of the file /admin/index.php. The manipulation of the argument username leads to sql injec...Show more A vulnerability classified as critical has been found in SourceCodester Best Online News Portal 1.0. This affects an unknown part of the file /admin/index.php. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-268461 was assigned to this vulnerability.Show less
CVE-2023-1962 1Mayurik 1Best Online News Portal Jun 17, 2026 Apr 9, 2023 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 A vulnerability classified as critical was found in SourceCodester Best Online News Portal 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/forgot-password.php of the component POST Para...Show more A vulnerability classified as critical was found in SourceCodester Best Online News Portal 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/forgot-password.php of the component POST Parameter Handler. The manipulation of the argument username leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-225361 was assigned to this vulnerability.Show less
CVE-2023-0785 1Mayurik 1Best Online News Portal Jun 17, 2026 Feb 12, 2023 N/A· v4 3.7 LOW· v3 2.6 LOW· v2 A vulnerability classified as problematic was found in SourceCodester Best Online News Portal 1.0. Affected by this vulnerability is an unknown functionality of the file check_availability.php. The manipulation of the ar...Show more A vulnerability classified as problematic was found in SourceCodester Best Online News Portal 1.0. Affected by this vulnerability is an unknown functionality of the file check_availability.php. The manipulation of the argument username leads to exposure of sensitive information through data queries. The attack can be launched remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The identifier VDB-220645 was assigned to this vulnerability.Show less
CVE-2023-0784 1Mayurik 1Best Online News Portal Jun 17, 2026 Feb 12, 2023 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 A vulnerability classified as critical has been found in SourceCodester Best Online News Portal 1.0. Affected is an unknown function of the component Login Page. The manipulation of the argument username leads to sql inj...Show more A vulnerability classified as critical has been found in SourceCodester Best Online News Portal 1.0. Affected is an unknown function of the component Login Page. The manipulation of the argument username leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-220644.Show less