CVE-2026-1142

CWE-352 — Cross-Site Request Forgery (CSRF)CWE-862 — Missing AuthorizationCWE-89 — SQL Injection5 documents5 sources
Severity
5.3MEDIUM
EPSS
0.1%
top 80.42%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Phpgurukul News Portal
Timeline
PublishedJan 19
Latest updateApr 13

Description

A security flaw has been discovered in PHPGurukul News Portal 1.0. The impacted element is an unknown function. Performing a manipulation results in cross-site request forgery. The attack may be initiated remotely. The exploit has been released to the public and may be used for attacks.

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

Affected Packages2 packages

▶CVEListV5phpgurukul/news_portal1.0

🔴Vulnerability Details

2
CVEList
PHPGurukul News Portal cross-site request forgery↗2026-01-19
▶
GHSA
GHSA-w98p-2mg7-6p5x: A security flaw has been discovered in PHPGurukul News Portal 1↗2026-01-19
▶

📋Vendor Advisories

2
CISA
Fortinet SQL Injection Vulnerability↗2026-04-13
▶
Fortinet
SQLi in administrative interface↗2026-02-06
▶
CVE-2026-1142 (MEDIUM CVSS 5.3) | A security flaw has been discovered | cvebase.io