7.5
CVSSv2

CVE-2025-4728

CVSSv4: 6.9 | CVSSv3: 9.8 | CVSSv2: 7.5 | VMScore: 790 | EPSS: 0.00032 | KEV: Not Included
Published: 15/05/2025 Updated: 27/05/2025

Vulnerability Summary

SQL Injection in SourceCodester Best Online News Portal 1.0 via searchtitle Parameter

A critical vulnerability exists in SourceCodester Best Online News Portal version 1.0. The vulnerability is located in the /search.php file and involves an unknown function. By manipulating the searchtitle argument, an attacker can perform a SQL injection attack. The vulnerability can be exploited remotely, and public disclosure means the exploit may potentially be used by malicious actors.

Vulnerable Product Search on Vulmon Subscribe to Product

sourcecodester best online news portal

mayurik best online news portal 1.0