CVE-2025-69992CRITICAL 9.8EPSS p39.2%

CVE-2025-69992CVE-2025-69992

Description

phpgurukul News Portal Project V4.1 has File Upload Vulnerability via upload.php, which enables the upload of files of any format to the server without identity authentication.

Scoring

CVSS 3.19.8 (CRITICAL)
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS0.51% probability of exploitation · percentile 39.2% · 2026-06-19T12:03:05Z
Published2026-01-13
Last modified2026-01-16

Underlying weaknesses· 1

CWE-125

References

  1. https://github.com/Y4y17/CVE/blob/main/News%20Portal%20Project/File%20upload%20vulnerability.md

1

TypeTargetConfidenceTier
WeaknessOut-of-bounds Readcwe-1250%live

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

CVE
CVE-2025-69990
CVE
CVE-2025-69991
CVE
CVE-2025-57148
CVE
CVE-2025-51414
CVE
CVE-2025-2687
CVE
CVE-2025-5250
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.