https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-4728.htmlhttps://patchthecve.com/cve/CVE-2025-4728.htmlWed, 17 Jun 2026 09:33:52 +0000HIGH 7.3: A vulnerability was found in SourceCodester Best Online News Portal 1.0. It has been classified as critical. Affected is an unknown function of the file /search.php. The manipulation of the argument searchtitle leads to sql injection. It is possible to launch the attack remotely. The exploit has beehttps://patchthecve.com/cve/CVE-2025-1875.htmlhttps://patchthecve.com/cve/CVE-2025-1875.htmlWed, 17 Jun 2026 08:40:14 +0000CRITICAL 9.8: SQL injection vulnerability have been found in 101news affecting version 1.0 through the "searchtitle" parameter in search.php.https://patchthecve.com/cve/CVE-2025-1874.htmlhttps://patchthecve.com/cve/CVE-2025-1874.htmlWed, 17 Jun 2026 08:40:14 +0000CRITICAL 9.8: SQL injection vulnerability have been found in 101news affecting version 1.0 through the "description" parameter in admin/add-category.php.https://patchthecve.com/cve/CVE-2025-1873.htmlhttps://patchthecve.com/cve/CVE-2025-1873.htmlWed, 17 Jun 2026 08:40:13 +0000CRITICAL 9.8: SQL injection vulnerability have been found in 101news affecting version 1.0 through the "pagetitle" and "pagedescription" parameters in admin/contactus.php.https://patchthecve.com/cve/CVE-2025-1872.htmlhttps://patchthecve.com/cve/CVE-2025-1872.htmlWed, 17 Jun 2026 08:40:12 +0000CRITICAL 9.8: SQL injection vulnerability have been found in 101news affecting version 1.0 through the "sadminusername" parameter in admin/add-subadmins.php.https://patchthecve.com/cve/CVE-2025-1871.htmlhttps://patchthecve.com/cve/CVE-2025-1871.htmlWed, 17 Jun 2026 08:40:05 +0000CRITICAL 9.8: SQL injection vulnerability have been found in 101news affecting version 1.0 through the "category" and "subcategory" parameters in admin/add-subcategory.php.https://patchthecve.com/cve/CVE-2025-1870.htmlhttps://patchthecve.com/cve/CVE-2025-1870.htmlWed, 17 Jun 2026 08:40:05 +0000CRITICAL 9.8: SQL injection vulnerability have been found in 101news affecting version 1.0 through the "pagedescription" parameter in admin/aboutus.php.https://patchthecve.com/cve/CVE-2025-1869.htmlhttps://patchthecve.com/cve/CVE-2025-1869.htmlWed, 17 Jun 2026 08:39:58 +0000CRITICAL 9.8: SQL injection vulnerability have been found in 101news affecting version 1.0 through the "username" parameter in admin/check_avalability.php.https://patchthecve.com/cve/CVE-2024-9008.htmlhttps://patchthecve.com/cve/CVE-2024-9008.htmlWed, 17 Jun 2026 08:23:46 +0000MEDIUM 6.3: A vulnerability classified as critical was found in SourceCodester Best Online News Portal 1.0. This vulnerability affects unknown code of the file /news-details.php of the component Comment Section. The manipulation of the argument name leads to sql injection. The attack can be initiated remotely. https://patchthecve.com/cve/CVE-2024-5985.htmlhttps://patchthecve.com/cve/CVE-2024-5985.htmlWed, 17 Jun 2026 08:17:02 +0000MEDIUM 6.3: A vulnerability classified as critical has been found in SourceCodester Best Online News Portal 1.0. This affects an unknown part of the file /admin/index.php. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclhttps://patchthecve.com/cve/CVE-2023-0785.htmlhttps://patchthecve.com/cve/CVE-2023-0785.htmlWed, 28 Oct 2026 19:10:00 +0000LOW 3.7: A vulnerability classified as problematic was found in SourceCodester Best Online News Portal 1.0. Affected by this vulnerability is an unknown functionality of the file check_availability.php. The manipulation of the argument username leads to exposure of sensitive information through data queries.