We’re taking on a small number of new builds and rebuilds this quarter. Book a call to see if your project is a fit.

CVE CVE-2026-5840

CVE-2026-5840

PHP

Severity: MEDIUM
CVSS: 4.7CVSS
Published: 2026-04-09
Last modified: 2026-04-09
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
CWE: CWE-74CWE-89

Description

A security flaw has been discovered in PHPGurukul News Portal Project 4.1. Impacted is an unknown function of the file /admin/check_availability.php. Performing a manipulation of the argument Username results in sql injection. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks.

References

https://github.com/f1rstb100d/CVE/issues/29
https://phpgurukul.com/
https://vuldb.com/submit/789913
https://vuldb.com/vuln/356296
https://vuldb.com/vuln/356296/cti

Summary

Description

References