Description
SourceCodester Best Online News Portal是SourceCodester开源的一个最佳在线新闻门户。 SourceCodester Best Online News Portal 1.0版本存在注入漏洞，该漏洞源于对文件/search.php中参数searchtitle的错误操作导致SQL注入。
SourceCodester Best Online News Portal 注入漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://www.sentinelone.com/vulnerability-database/cve-2025-4728/
https://cve.imfht.com/detail/CVE-2025-4728?lang=en
https://www.cve.org/CVERecord?id=CVE-2025-4728
https://nvd.nist.gov/vuln/detail/CVE-2024-9008
https://github.com/gurudattch/CVEs/blob/main/Sourcecodester-News-Portal-Comment-Blind-SQLi.md
https://vuldb.com/?id.278164
https://db.gcve.eu/search?vendor=SourceCodester&product=Best+Online+News+Portal
https://www.nsfocus.net/vulndb/115590
https://app.opencve.io/cve/CVE-2024-9008