1h3ll/CVEs

Releases0

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2025-50367 ↗	Jun 27, 2025Friday, 27 June 2025, 16:15	6.1 MEDIUM	—
A stored blind XSS vulnerability exists in the Contact Page of the Phpgurukul Medical Card Generation System 1.0 mcgs/contact.php. The name field fails to properly sanitize user input, allowing an attacker to inject malicious JavaScript.
CVE-2025-50369 ↗	Jun 27, 2025Friday, 27 June 2025, 16:15	6.5 MEDIUM	—
A Cross-Site Request Forgery (CSRF) vulnerability exists in the Manage Card functionality (/mcgs/admin/manage-card.php) of PHPGurukul Medical Card Generation System 1.0. The vulnerable endpoint allows an authorized admin to delete medical card records by sending a simple GET request without verifying the origin of the request.
CVE-2025-50370 ↗	Jun 27, 2025Friday, 27 June 2025, 16:15	6.5 MEDIUM	—
A Cross-Site Request Forgery (CSRF) vulnerability exists in the Inquiry Management functionality /mcgs/admin/readenq.php of the Phpgurukul Medical Card Generation System 1.0. The vulnerable endpoint allows an authenticated admin to delete inquiry records via a simple GET request, without requiring a CSRF token or validating the origin of the request.