CVE-2025-2378: PHPGurukul Medical Card Generation System download-medical-cards.php sql injection

Published Mar 17, 2025

Updated

A vulnerability was found in PHPGurukul Medical Card Generation System 1.0. It has been classified as critical. This affects an unknown part of the file /download-medical-cards.php. The manipulation of the argument searchdata leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

Affected Software

2 affected components

Phpgurukul Medical Card Generation System

Phpgurukul Medical Card System=1.0

Event History

Mar 17, 2025

CVE Published

via MITRE·01:00 PM

Data Sourced

via MITRE·01:00 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·01:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-2378?

CVE-2025-2378 has been classified as critical.

What type of vulnerability is CVE-2025-2378?

CVE-2025-2378 is categorized as an SQL injection vulnerability.

Which part of the software is affected by CVE-2025-2378?

CVE-2025-2378 affects the file /download-medical-cards.php in the PHPGurukul Medical Card Generation System.

How can I fix CVE-2025-2378?

To fix CVE-2025-2378, ensure proper validation and sanitization of the input parameters, particularly the argument searchdata.

What happens if CVE-2025-2378 is exploited?

If exploited, CVE-2025-2378 allows an attacker to manipulate SQL queries, potentially leading to unauthorized data access or manipulation.