CVE-2025-50494

CVE-2025-50494 affects PHPGurukul Car Washing Management System v1.0, specifically the /doctor/change-password.php component. The root cause is improper session invalidation, enabling potential session hijacking. Multiple connected sources corroborate this description and identify the vulnerable ...

CVE-2025-7177

The CVE-2025-7177 affects PHPGurukul Car Washing Management System 1.0. Affected code is the file /admin/editcar-washpoint.php, where the wpid parameter is directly used in SQL queries, enabling a SQL injection vulnerability. This can be exploited remotely and may lead to unauthorized database ac...