A Cross-Site Request Forgery (CSRF) vulnerability exists in the Manage Card functionality (/mcgs/admin/manage-card.php) of PHPGurukul Medical Card Generation System 1.0. The vulnerable endpoint allows an authorized admin to delete medical card records by sending a simple GET request without verifying the origin of the request.

Last Modified: Jul 01, 2025

Published: Jun 27, 2025

CVE-2025-50370

A Cross-Site Request Forgery (CSRF) vulnerability exists in the Inquiry Management functionality /mcgs/admin/readenq.php of the Phpgurukul Medical Card Generation System 1.0. The vulnerable endpoint allows an authenticated admin to delete inquiry records via a simple GET request, without requiring a CSRF token or validating the origin of the request.

Last Modified: Jul 13, 2025

Published: Jun 27, 2025

CVE-2025-50367

A stored blind XSS vulnerability exists in the Contact Page of the Phpgurukul Medical Card Generation System 1.0 mcgs/contact.php. The name field fails to properly sanitize user input, allowing an attacker to inject malicious JavaScript.

Last Modified: Jul 01, 2025

Published: Jun 27, 2025

CVE-2025-6613

PHPGurukul Hospital Management System manage-patient.php cross site scripting

Last Modified: Jul 06, 2025

Published: Jun 25, 2025

CVE-2025-6570

PHPGurukul Hospital Management System search.php sql injection

Last Modified: Jul 06, 2025

Published: Jun 24, 2025

Items Per Page