PT-2026-20481

Name of the Vulnerable Software and Affected Versions PHPGurukul Hospital Management System version 4.0 Description The application does not properly validate CSRF tokens on the add-doctor.php endpoint, specifically within the 'Add Doctor' module. This allows attackers to create new Doctor...

PT-2025-35815

Name of the Vulnerable Software and Affected Versions: phpgurukul Doctor Appointment Management System version 1.0 Description: An authenticated doctor user can inject arbitrary JavaScript code into their profile name. This payload is rendered without proper sanitization when a user visits the...