CVE-2026-1141: falha de média gravidade em PHPGurukul News Portal
PHPGurukul News Portal Add Sub-Admin add-subadmins.php improper authorization
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 5.3epss 0.4%
A vulnerability was identified in PHPGurukul News Portal 1.0. The affected element is an unknown function of the file /admin/add-subadmins.php of the component Add Sub-Admin Page. Such manipulation leads to improper authorization. The attack can be launched remotely. The exploit is publicly available and might be used.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Produtos afetados
PHPGurukul · News PortalCVEs relacionadas — PHPGurukul News Portal
No mesmo produto, das mais perigosas para as menos.
CVE-2024-3768MEDIUMPHPGurukul/itsourcecode News Portal search.php sql injectionEPSS 0.8%CVE-2024-3767MEDIUMPHPGurukul News Portal edit-post.php sql injectionEPSS 0.8%CVE-2025-4880MEDIUMPHPGurukul News Portal aboutus.php sql injectionEPSS 0.6%CVE-2025-4873MEDIUMPHPGurukul News Portal Login index.php sql injectionEPSS 0.6%CVE-2025-12616MEDIUMPHPGurukul News Portal settings.py insertion of sensitive information into debugging codeEPSS 0.6%CVE-2025-5370MEDIUMPHPGurukul News Portal forgot-password.php sql injectionEPSS 0.5%