EUVD-2024-33026

Malicious code in bioql PyPI...

EUVD-2024-54551

Malicious code in bioql PyPI...

EUVD-2025-19413

Malicious code in bioql PyPI...

CVE-2025-50369

A Cross-Site Request Forgery CSRF vulnerability exists in the Manage Card functionality /mcgs/admin/manage-card.php of PHPGurukul Medical Card Generation System 1.0. The vulnerable endpoint allows an authorized admin to delete medical card records by sending a simple GET request without verifying...

PT-2025-27236 · Unknown · Phpgurukul Medical Card Generation System

Name of the Vulnerable Software and Affected Versions: Phpgurukul Medical Card Generation System version 1.0 Description: A stored blind XSS issue exists in the Contact Page, specifically affecting the "name" field in the mcgs/contact.php file. This field fails to properly sanitize user input,...

CVE-2025-50369: Cross-Site Request Forgery (CSRF)

A Cross-Site Request Forgery CSRF vulnerability exists in the Manage Card functionality /mcgs/admin/manage-card.php of PHPGurukul Medical Card Generation System 1.0. The vulnerable endpoint allows an authorized admin to delete medical card records by sending a simple GET request without verifying...

CVE-2025-50369

A Cross-Site Request Forgery CSRF vulnerability exists in the Manage Card functionality /mcgs/admin/manage-card.php of PHPGurukul Medical Card Generation System 1.0. The vulnerable endpoint allows an authorized admin to delete medical card records by sending a simple GET request without verifying...

CVE-2025-50369

A Cross-Site Request Forgery (CSRF) vulnerability exists in the PHPGurukul Medical Card Generation System 1.0 within the Manage Card functionality at the /mcgs/admin/manage-card.php endpoint. The root cause is a lack of CSRF protection and origin verification, allowing an attacker to trigger a si...

CVE-2025-50370

A Cross-Site Request Forgery CSRF vulnerability exists in the Inquiry Management functionality /mcgs/admin/readenq.php of the Phpgurukul Medical Card Generation System 1.0. The vulnerable endpoint allows an authenticated admin to delete inquiry records via a simple GET request, without requiring ...

CVE-2025-50367

A stored blind XSS vulnerability exists in the Contact Page of the Phpgurukul Medical Card Generation System 1.0 mcgs/contact.php. The name field fails to properly sanitize user input, allowing an attacker to inject malicious JavaScript...

CVE-2025-50367

A stored blind XSS vulnerability exists in the Phpgurukul Medical Card Generation System 1.0 within the mcgs/contact.php file. The vulnerability is caused by improper sanitization of the name field, which allows an attacker to inject malicious JavaScript. As a workaround, it is recommended to imp...

CVE-2025-50367: Improper Neutralization of Input During Web Page Generation

A stored blind XSS vulnerability exists in the Contact Page of the Phpgurukul Medical Card Generation System 1.0 mcgs/contact.php. The name field fails to properly sanitize user input, allowing an attacker to inject malicious JavaScript...

CVE-2025-50370

A Cross-Site Request Forgery CSRF vulnerability exists in the Inquiry Management functionality /mcgs/admin/readenq.php of the Phpgurukul Medical Card Generation System 1.0. The vulnerable endpoint allows an authenticated admin to delete inquiry records via a simple GET request, without requiring ...

CVE-2025-50370: Cross-Site Request Forgery (CSRF)

A Cross-Site Request Forgery CSRF vulnerability exists in the Inquiry Management functionality /mcgs/admin/readenq.php of the Phpgurukul Medical Card Generation System 1.0. The vulnerable endpoint allows an authenticated admin to delete inquiry records via a simple GET request, without requiring ...

CVE-2025-5670

A vulnerability, which was classified as critical, has been found in PHPGurukul Medical Card Generation System 1.0. This issue affects some unknown processing of the file /admin/manage-card.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The...

CVE-2025-5670 PHPGurukul Medical Card Generation System manage-card.php sql injection

A vulnerability, which was classified as critical, has been found in PHPGurukul Medical Card Generation System 1.0. This issue affects some unknown processing of the file /admin/manage-card.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The...

CVE-2025-5670

CVE-2025-5670 affects PHPGurukul Medical Card Generation System 1.0. Multiple sources confirm a SQL injection in the /admin/manage-card.php file via the ID parameter, enabling remote exploitation and potentially data exfiltration. No patch/version fix details are provided in the supplied document...

CVE-2025-5669

The connected sources confirm a SQL injection vulnerability in PHPGurukul Medical Card Generation System v1.0, specifically in the file /admin/unreadenq.php via the ID parameter. The issue is exploitable remotely and there are public disclosures of the exploit. Across multiple records (NVD, Red H...

CVE-2025-5669 PHPGurukul Medical Card Generation System unreadenq.php sql injection

A vulnerability classified as critical was found in PHPGurukul Medical Card Generation System 1.0. This vulnerability affects unknown code of the file /admin/unreadenq.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been...

CVE-2025-5669 PHPGurukul Medical Card Generation System unreadenq.php sql injection

A vulnerability classified as critical was found in PHPGurukul Medical Card Generation System 1.0. This vulnerability affects unknown code of the file /admin/unreadenq.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been...