CVE-2025-50494

The PHPGurukul Car Washing Management System v1.0 is vulnerable to a session hijacking attack due to improper session invalidation in the /doctor/change-password.php component. Attackers can exploit this flaw to take over active sessions. Remediation involves addressing the session invalidation l...

CVE-2025-7177

The CVE-2025-7177 affects PHPGurukul Car Washing Management System 1.0. Affected code is the file /admin/editcar-washpoint.php, where the wpid parameter is directly used in SQL queries, enabling a SQL injection vulnerability. This can be exploited remotely and may lead to unauthorized database ac...