CVE-2026-5840 — Injection in News Portal Project

CWE-74 — InjectionCWE-89 — SQL Injection3 documents3 sources
Severity
5.1MEDIUMNVD
EPSS
0.0%
top 89.44%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Phpgurukul News Portal Project
Timeline
PublishedApr 9

Description

A security flaw has been discovered in PHPGurukul News Portal Project 4.1. Impacted is an unknown function of the file /admin/check_availability.php. Performing a manipulation of the argument Username results in sql injection. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks.

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

Affected Packages1 packages

🔴Vulnerability Details

2
CVEList
PHPGurukul News Portal Project check_availability.php sql injection↗2026-04-09
▶
GHSA
GHSA-3pxp-646h-v7m3: A security flaw has been discovered in PHPGurukul News Portal Project 4↗2026-04-09
▶
CVE-2026-5840 — Injection in News Portal Project | cvebase