News Portal
Approved changes feed: RSS · Atom
cpe:2.3:a:phpgurukul:news_portal:1.0:*:*:*:*:*:*:*
part: a version: 1.0 update: *
| Vendor | Phpgurukul (43390843-85b8-5d5e-9218-29dc10c3657d) |
|---|---|
| Product | News Portal (95c43179-24cd-5906-99b2-eaddff407cc0) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-1424 |
vulnerable | 2026-06-08 07:49:08.535665 |
PHPGurukul News Portal Profile Pic unrestricted upload
MEDIUM (4.7)
A vulnerability was identified in PHPGurukul News Portal 1.0. This affects an unknown part of the component Profile Pic Handler. The manipulation leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit is publicly available and might be used.
Published: 2026-01-26T07:02:07.123Z
Updated: 2026-02-23T08:57:53.045Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-1142 |
vulnerable | 2026-06-08 07:47:14.378517 |
PHPGurukul News Portal cross-site request forgery
MEDIUM (4.3)
A security flaw has been discovered in PHPGurukul News Portal 1.0. The impacted element is an unknown function. Performing a manipulation results in cross-site request forgery. The attack may be initiated remotely. The exploit has been released to the public and may be used for attacks.
Published: 2026-01-19T06:32:07.733Z
Updated: 2026-02-23T08:43:11.586Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-1141 |
vulnerable | 2026-06-08 07:47:14.378042 |
PHPGurukul News Portal Add Sub-Admin add-subadmins.php improper authorization
MEDIUM (6.3)
A vulnerability was identified in PHPGurukul News Portal 1.0. The affected element is an unknown function of the file /admin/add-subadmins.php of the component Add Sub-Admin Page. Such manipulation leads to improper authorization. The attack can be launched remotely. The exploit is publicly available and might be used.
Published: 2026-01-19T06:02:07.574Z
Updated: 2026-02-23T08:42:58.178Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-12616 |
vulnerable | 2026-06-08 07:04:30.527263 |
PHPGurukul News Portal settings.py insertion of sensitive information into debugging code
LOW (3.7)
A vulnerability was detected in PHPGurukul News Portal 1.0. The impacted element is an unknown function of the file /onps/settings.py. Performing a manipulation results in insertion of sensitive information into debugging code. It is possible to initiate the attack remotely. The attack's complexity is rated as high. The exploitability is regarded as difficult. The exploit is now public and may be used.
Published: 2025-11-03T04:02:06.308Z
Updated: 2026-02-24T06:22:30.346Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-12615 |
vulnerable | 2026-06-08 07:04:30.526573 |
PHPGurukul News Portal settings.py hard-coded key
MEDIUM (5)
A security vulnerability has been detected in PHPGurukul News Portal 1.0. The affected element is an unknown function of the file /onps/settings.py. Such manipulation of the argument SECRET_KEY leads to use of hard-coded cryptographic key
. The attack may be performed from remote. The attack requires a high level of complexity. The exploitability is described as difficult. The exploit has been disclosed publicly and may be used.
Published: 2025-11-03T03:32:06.859Z
Updated: 2026-02-24T06:22:16.946Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.