Home

Description

EN DE

A vulnerability was detected in PHPGurukul News Portal 1.0. The impacted element is an unknown function of the file /onps/settings.py. Performing manipulation results in insertion of sensitive information into debugging code. It is possible to initiate the attack remotely. The attack's complexity is rated as high. The exploitability is regarded as difficult. The exploit is now public and may be used.

In PHPGurukul News Portal 1.0 wurde eine Schwachstelle gefunden. Es ist betroffen eine unbekannte Funktion der Datei /onps/settings.py. Mittels Manipulieren mit unbekannten Daten kann eine insertion of sensitive information into debugging code-Schwachstelle ausgenutzt werden. Es ist möglich, den Angriff aus der Ferne durchzuführen. Die Komplexität eines Angriffs ist eher hoch. Sie ist schwierig ausnutzbar. Der Exploit steht zur öffentlichen Verfügung.

PUBLISHED Reserved 2025-11-02 | Published 2025-11-03 | Updated 2025-11-03 | Assigner VulDB




MEDIUM: 6.3CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P
LOW: 3.7CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R
LOW: 3.7CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R
2.6AV:N/AC:H/Au:N/C:P/I:N/A:N/E:POC/RL:ND/RC:UR

Problem types

Insertion of Sensitive Information Into Debugging Code

Information Disclosure

Product status

1.0
affected

Timeline

2025-11-02:Advisory disclosed
2025-11-02:VulDB entry created
2025-11-02:VulDB entry last update

Credits

Nishant_Kumar (VulDB User) reporter

References

github.com/.../main/Information Disclosure via Debug Mode.md exploit

vuldb.com/?id.330910 (VDB-330910 | PHPGurukul News Portal settings.py insertion of sensitive information into debugging code) vdb-entry

vuldb.com/?ctiid.330910 (VDB-330910 | CTI Indicators (IOB, IOC, TTP, IOA)) signature permissions-required

vuldb.com/?submit.678649 (Submit #678649 | PHPGurukul News Portal using Python Django and MySQL 1.0 Insertion of Sensitive Information Into Debugging Code) third-party-advisory

github.com/.../main/Information Disclosure via Debug Mode.md exploit

phpgurukul.com/ product

cve.org (CVE-2025-12616)

nvd.nist.gov (CVE-2025-12616)

Download JSON