Advisories · Technology
PHPGurukul News Portal.
Every CVE that names PHPGurukul News Portal among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.1 Medium
PHPGurukul News Portal Profile Pic unrestricted upload
- PHPGurukul News Portal
- Broken access control
- Unrestricted file upload
- CVSS 5.3 Medium
PHPGurukul News Portal cross-site request forgery
- PHPGurukul News Portal
- Cross-site request forgery (CSRF)
- Broken access control
- CVSS 5.3 Medium
PHPGurukul News Portal Add Sub-Admin add-subadmins.php improper authorization
- PHPGurukul News Portal
- Privilege escalation
- Broken access control
- CVSS 6.3 Medium
PHPGurukul News Portal settings.py insertion of sensitive information into debugging code
- PHPGurukul News Portal
- Information disclosure
- CWE-215
- CVSS 2.3 Low
PHPGurukul News Portal settings.py hard-coded key
- PHPGurukul News Portal
- Hard-coded credentials
- CWE-320
- CVSS 6.9 Medium
PHPGurukul News Portal forgot-password.php sql injection
- PHPGurukul News Portal
- Other injection
- SQL injection
- CVSS 6.9 Medium
PHPGurukul News Portal aboutus.php sql injection
- PHPGurukul News Portal
- Other injection
- SQL injection
- CVSS 6.9 Medium
PHPGurukul News Portal Login index.php sql injection
- PHPGurukul News Portal
- Other injection
- SQL injection
- CVSS 6.9 Medium
PHPGurukul News Portal login.php sql injection
- PHPGurukul News Portal
- Other injection
- SQL injection
- CVSS 5.3 Medium
PHPGurukul/itsourcecode News Portal search.php sql injection
- PHPGurukul News Portal
- itsourcecode News Portal
- SQL injection
- CVSS 5.3 Medium
PHPGurukul News Portal edit-post.php sql injection
- PHPGurukul News Portal
- Other injection
- SQL injection