CVE-2026-3135 - Vulnerability Analysis

Overview

itsourcecode News Portal Project 1.0 contains a SQL injection caused by manipulation of the "Category" argument in /admin/add-category.php, letting remote attackers execute arbitrary SQL commands, exploit requires no special privileges.

Severity & Score

Impact

Remote attackers can execute arbitrary SQL commands, potentially leading to data disclosure or modification.

Mitigation

Update to the latest version or apply patches to fix SQL injection in /admin/add-category.php.

References

• https://github.com/910biter/cve/issues/2
• https://itsourcecode.com/
• https://vuldb.com/?ctiid.347630
• https://vuldb.com/?id.347630
• https://vuldb.com/?submit.758336

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner