CVE-2025-12616 — Vulnerability intelligence

phpgurukul — news portal

Published: 2025-11-03T04:02:06.308Z

CVSS

6.3

CISA KEV

Not listed; not proof of no exploitation

Original source text (not a translation)

A vulnerability was detected in PHPGurukul News Portal 1.0. The impacted element is an unknown function of the file /onps/settings.py. Performing a manipulation results in insertion of sensitive information into debugging code. It is possible to initiate the attack remotely. The attack's complexity is rated as high. The exploitability is regarded as difficult. The exploit is now public and may be used.

Sources

• CVE-2025-12616
• Exploit, Third Party Advisory
• Product
• Permissions Required, VDB Entry
• Third Party Advisory, VDB Entry
• Third Party Advisory, VDB Entry
• CVE-2025-12616