A vulnerability, which was classified as critical, has been found in itsourcecode News Portal Project 1.0. This affects an unknown part of the file /admin/aboutus.php. This manipulation of the argument pagetitle causes sql injection.

This vulnerability appears as CVE-2026-2162. The attack may be initiated remotely. In addition, an exploit is available.