CVE-2025-69992: Critical severity Phpgurukul News Portal Project vulnerability
Published Jan 13, 2026
·Updated
phpgurukul News Portal Project V4.1 has File Upload Vulnerability via upload.php, which enables the upload of files of any format to the server without identity authentication.
Affected Software
2 affected components
Phpgurukul News Portal Project
Phpgurukul News Portal=4.1
Event History
Jan 13, 2026
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·04:16 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-69992?
CVE-2025-69992 is considered a high severity vulnerability due to its potential for unauthorized file uploads.
2
How can I fix CVE-2025-69992?
To fix CVE-2025-69992, implement stricter file upload validations and authentication mechanisms in upload.php.
3
What type of vulnerability is CVE-2025-69992?
CVE-2025-69992 is a file upload vulnerability that allows unauthorized file uploads to the server.
4
Which versions of the Phpgurukul News Portal Project are affected by CVE-2025-69992?
CVE-2025-69992 affects Phpgurukul News Portal Project version 4.1.
5
What are the potential impacts of exploiting CVE-2025-69992?
Exploiting CVE-2025-69992 could allow attackers to upload malicious files, potentially leading to remote code execution or data breaches.