CVE-2025-69990: Critical severity Phpgurukul News Portal Project vulnerability
Published Jan 13, 2026
·Updated
phpgurukul News Portal Project V4.1 has an Arbitrary File Deletion Vulnerability in removefile.php. The parameter file can cause any file to be deleted.
Affected Software
2 affected components
Phpgurukul News Portal Project
Phpgurukul News Portal=4.1
Event History
Jan 13, 2026
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·04:16 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-69990?
The severity of CVE-2025-69990 is considered critical due to its potential for arbitrary file deletion.
2
How do I fix CVE-2025-69990?
To fix CVE-2025-69990, validate and sanitize the 'file' parameter in remove_file.php to prevent unauthorized file deletion.
3
What types of files can be deleted due to CVE-2025-69990?
CVE-2025-69990 allows for the deletion of any file on the server that the application has access to, which includes critical system files.
4
Is CVE-2025-69990 remotely exploitable?
Yes, CVE-2025-69990 is remotely exploitable, allowing attackers to issue deletion requests from outside the application.
5
Which version of the software is affected by CVE-2025-69990?
CVE-2025-69990 affects version 4.1 of the Phpgurukul News Portal Project.